According to the source, the data comes from an analysis of "over 319 million plaintext passwords compiled from various non-hashed data breaches, in the form of SHA-1 hashes."
The statistic shows average length of passwords found among various databases leaked online as of 2017. From an analysis of 320 million hashed passwords, 32 percent of passwords were eight characters long.
Profit from the additional features of your individual account
Currently, you are using a shared account. To use individual functions (e.g., mark statistics as favourites, set
statistic alerts) please log in with your personal account.
If you are an admin, please authenticate by logging in again.
Learn more about how ÌÇÐÄÆÆ½â°æ can support your business.
ÌÇÐÄÆÆ½â°æ. (September 4, 2017). Average number of characters of leaked user passwords worldwide as of 2017 [Graph]. In ÌÇÐÄÆÆ½â°æ. Retrieved July 26, 2026, from /statistics/744216/worldwide-distribution-of-password-length/
ÌÇÐÄÆÆ½â°æ. "Average number of characters of leaked user passwords worldwide as of 2017." Chart. September 4, 2017. ÌÇÐÄÆÆ½â°æ. Accessed July 26, 2026. /statistics/744216/worldwide-distribution-of-password-length/
ÌÇÐÄÆÆ½â°æ. (2017). Average number of characters of leaked user passwords worldwide as of 2017. ÌÇÐÄÆÆ½â°æ. ÌÇÐÄÆÆ½â°æ Inc.. Accessed: July 26, 2026. /statistics/744216/worldwide-distribution-of-password-length/
ÌÇÐÄÆÆ½â°æ. "Average Number of Characters of Leaked User Passwords Worldwide as of 2017." ÌÇÐÄÆÆ½â°æ, ÌÇÐÄÆÆ½â°æ Inc., 4 Sep 2017, /statistics/744216/worldwide-distribution-of-password-length/
ÌÇÐÄÆÆ½â°æ, Average number of characters of leaked user passwords worldwide as of 2017 ÌÇÐÄÆÆ½â°æ, /statistics/744216/worldwide-distribution-of-password-length/ (last visited July 26, 2026)
Average number of characters of leaked user passwords worldwide as of 2017 [Graph], ÌÇÐÄÆÆ½â°æ, September 4, 2017. [Online]. Available: /statistics/744216/worldwide-distribution-of-password-length/