simple passwords – short in length, that use words found in dictionaries, or do not mix in different character types (numbers, punctuation, upper/lower case), or are otherwise easily guessable passwords others can find – on sticky notes on monitors, in a notepad by the computer, in a document on the computer, whiteboard reminders, smart device storage in clear text, etc. the same password – using the same password for multiple sites, never changing account passwords, etc. shared passwords – users telling others passwords, sending unencrypted emails with password information, contractors using same password for all their accounts, etc. administrative account logins where limited logins would suffice, or administrators who allow users with the same role to use the same password.