The Great Password Shame: Why We Still Reuse Them

We know we should not reuse passwords, and yet most of us still do. New data from Huntress finds that 23% of people reuse the same password across three or more accounts, and 69% say they feel overwhelmed by the number of passwords they have to manage (Huntress, 2026).

The short version: password reuse is not a knowledge problem, it is a behavior problem. People know the risk, but the friction of managing dozens of unique passwords is too high, so they default to reuse and hope nothing bad happens.

The numbers

Huntress's research paints a clear picture. Nearly a quarter of people reuse passwords across multiple accounts, and more than two-thirds feel overwhelmed by password management. The result is a security gap that no amount of warning seems to close.

Why we keep doing it

The psychology is straightforward. Unique passwords are hard to remember, and password managers add a layer of setup that many people never complete. When the cost of doing the right thing feels high, people take the shortcut.

Password reuse is not a knowledge gap. It is a behavior gap, and shame keeps people from fixing it.

— Huntress

What actually helps

The fix is not more warnings. It is lowering the friction: password managers, passkeys, and single sign-on all reduce the number of passwords people need to remember. When the right behavior is also the easy behavior, reuse drops.

• 23% reuse the same password across 3+ accounts
• 69% feel overwhelmed by password management
• 68% were forced to reset a password in the past year
• Password managers and passkeys reduce reuse

Sources and further reading

• Huntress — The great password shame: why we still reuse passwords
• NIST — Digital identity guidelines
• Have I Been Pwned — Check if your data was breached
• AI Companions Pass 130 Million Users: The Numbers Are Real
• The Dead Internet Theory Is Real. Bots Outnumber Us Now