We found that only 15 websites were following best practices. Those rows are highlighted in green.
We collected data from October 2021 to December 2021. Researchers can download our data here.
| Website | Tranco rank | Minimum length | Requires specific types of characters | Allowed leaked (out of 20 tested) | Allowed easiest-guessed (out of 20 tested) | Strength meter present |
|---|---|---|---|---|---|---|
| google.com | 1 | 8 | 0 | 0 | Models guessability | |
| netflix.com | 2 | 6 | 20 | 20 | ||
| facebook.com | 4 | 6 | 8 | 2 | Models complexity | |
| microsoft.com | 5 | 8 | 14 | 0 | ||
| twitter.com | 6 | 8 | 12 | 2 | ||
| instagram.com | 7 | 6 | 8 | 3 | ||
| linkedin.com | 9 | 8 | 14 | 0 | ||
| apple.com | 11 | 8 | 4 | 0 | Models complexity | |
| wikipedia.org | 12 | 8 | 5 | 1 | ||
| amazon.com | 16 | 6 | 20 | 20 | ||
| yahoo.com | 17 | 7 | 0 | 0 | Models guessability | |
| pinterest.com | 21 | 6 | 4 | 1 | ||
| adobe.com | 22 | 8 | 0 | 0 | ||
| vimeo.com | 24 | 8 | 18 | 15 | ||
| wordpress.com | 27 | 6 | 3 | 1 | ||
| reddit.com | 31 | 8 | 16 | 4 | ||
| zoom.us | 33 | 8 | 20 | 20 | ||
| github.com | 34 | 8 | 0 | 0 | ||
| amazonaws.com | 36 | 8 | 20 | 20 | ||
| bit.ly | 37 | 6 | 6 | 3 | ||
| tumblr.com | 43 | 8 | 0 | 0 | Models guessability | |
| vk.com | 48 | 6 | 1 | 1 | ||
| nytimes.com | 49 | 6 | 20 | 20 | ||
| flickr.com | 51 | 12 | 20 | 20 | ||
| dropbox.com | 53 | 6 | 20 | 20 | Models guessability | |
| soundcloud.com | 56 | 8 | 20 | 20 | ||
| spotify.com | 59 | 8 | 12 | 6 | ||
| myshopify.com | 60 | 5 | 20 | 20 | Models guessability | |
| cnn.com | 65 | 8 | 20 | 20 | ||
| forbes.com | 66 | 8 | 20 | 20 | ||
| ebay.com | 68 | 6 | 11 | 9 | ||
| theguardian.com | 69 | 8 | 0 | 0 | ||
| w3.org | 70 | 8 | 0 | 0 | Models complexity | |
| paypal.com | 72 | 8 | 15 | 5 | ||
| twitch.tv | 73 | 8 | 0 | 0 | Models guessability | |
| sourceforge.net | 74 | 10 | 0 | 0 | ||
| cloudflare.com | 75 | 8 | 20 | 20 | ||
| archive.org | 76 | 3 | 20 | 20 | ||
| imdb.com | 77 | 8 | 20 | 20 | ||
| bbc.co.uk | 89 | 8 | 17 | 14 | ||
| issuu.com | 91 | 4 | 20 | 20 | ||
| weebly.com | 92 | 8 | 0 | 0 | ||
| aliexpress.com | 95 | 6 | 20 | 20 | Models complexity | |
| washingtonpost.com | 96 | 8 | 20 | 20 | ||
| stackoverflow.com | 98 | 8 | 20 | 20 | ||
| etsy.com | 99 | 6 | 20 | 20 | Models complexity | |
| reuters.com | 103 | 8 | 20 | 20 | ||
| tinyurl.com | 106 | 6 | 20 | 20 | ||
| tiktok.com | 108 | 8 | 20 | 20 | ||
| wsj.com | 109 | 5 | 20 | 20 | ||
| wix.com | 113 | 6 | 20 | 20 | Models complexity | |
| bloomberg.com | 114 | 8 | 2 | 1 | ||
| sciencedirect.com | 118 | 8 | 20 | 20 | Models complexity | |
| slideshare.net | 120 | 5 | 20 | 20 | ||
| imgur.com | 121 | 6 | 20 | 20 | ||
| oracle.com | 122 | 8 | 20 | 20 | ||
| opera.com | 123 | 8 | 0 | 0 | ||
| booking.com | 125 | 10 | 20 | 20 | ||
| indeed.com | 126 | 8 | 9 | 1 | ||
| businessinsider.com | 127 | 8 | 20 | 20 | ||
| canva.com | 132 | 8 | 2 | 0 | Models guessability | |
| godaddy.com | 135 | 9 | 20 | 20 | Models guessability | |
| cnet.com | 140 | 6 | 20 | 20 | ||
| ibm.com | 143 | 8 | 19 | 20 | ||
| researchgate.net | 144 | 6 | 20 | 20 | Models complexity | |
| digicert.com | 145 | 10 | 20 | 20 | ||
| dailymail.co.uk | 148 | 5 | 20 | 20 | ||
| slack.com | 150 | 6 | 13 | 4 | ||
| fandom.com | 154 | 1 | 20 | 20 | ||
| nature.com | 157 | 8 | 20 | 20 | ||
| force.com | 159 | 8 | 19 | 18 | ||
| cnbc.com | 160 | 8 | 20 | 20 | ||
| usatoday.com | 161 | 5 | 20 | 20 | Models complexity | |
| chase.com | 163 | 8 | 11 | 9 | ||
| walmart.com | 164 | 8 | 20 | 20 | ||
| hp.com | 166 | 8 | 20 | 20 | ||
| surveymonkey.com | 168 | 8 | 11 | 2 | ||
| aol.com | 170 | 7 | 0 | 0 | Models guessability | |
| yelp.com | 171 | 6 | 14 | 6 | Models complexity | |
| eventbrite.com | 173 | 8 | 20 | 20 | Models guessability | |
| telegraph.co.uk | 174 | 8 | 20 | 20 | ||
| opendns.com | 176 | 8 | 20 | 20 | ||
| cpanel.net | 177 | 4 | 7 | 7 | Models guessability | |
| springer.com | 186 | 6 | 20 | 20 | ||
| time.com | 187 | 8 | 20 | 20 | ||
| npr.org | 189 | 5 | 20 | 20 | ||
| ted.com | 190 | 8 | 20 | 20 | ||
| samsung.com | 191 | 8 | 19 | 14 | ||
| myspace.com | 194 | 8 | 20 | 20 | ||
| dailymotion.com | 196 | 8 | 20 | 20 | ||
| themeforest.net | 198 | 8 | 0 | 0 | ||
| huffingtonpost.com | 199 | 8 | 20 | 20 | ||
| wired.com | 200 | 6 | 20 | 20 | ||
| mailchimp.com | 201 | 8 | 20 | 20 | ||
| espn.com | 202 | 6 | 14 | 10 | Models complexity | |
| addthis.com | 204 | 6 | 20 | 20 | ||
| techcrunch.com | 205 | 7 | 0 | 0 | Models guessability | |
| scribd.com | 208 | 8 | 20 | 20 | ||
| zillow.com | 211 | 8 | 20 | 20 | ||
| goodreads.com | 212 | 6 | 20 | 20 | ||
| unsplash.com | 213 | 6 | 20 | 20 | ||
| indiatimes.com | 214 | 6 | 20 | 20 | ||
| trello.com | 219 | 8 | 20 | 20 | ||
| grammarly.com | 220 | 8 | 0 | 0 | ||
| tripadvisor.com | 221 | 6 | 11 | 3 | ||
| freepik.com | 222 | 6 | 0 | 2 | ||
| independent.co.uk | 225 | 6 | 20 | 20 | ||
| roblox.com | 226 | 8 | 18 | 6 | ||
| squarespace.com | 230 | 6 | 20 | 20 | ||
| foxnews.com | 232 | 6 | 20 | 20 | ||
| zendesk.com | 237 | 5 | 20 | 20 | ||
| latimes.com | 239 | 6 | 20 | 20 | ||
| line.me | 245 | 6 | 20 | 20 | ||
| shutterstock.com | 246 | 8 | 20 | 20 | ||
| livejournal.com | 247 | 6 | 19 | 10 | ||
| wetransfer.com | 248 | 8 | 19 | 4 | ||
| intuit.com | 250 | 8 | 20 | 20 | ||
| intel.com | 254 | 8 | 20 | 20 | ||
| stackexchange.com | 256 | 8 | 20 | 20 | ||
| w3schools.com | 262 | 8 | 20 | 20 |