--- title: Half of Businesses Have Yet to Take Control of Password Security; Technology Sector Leads the Pack description: The technology industry is leading the pack in password security, with the highest average security score of any industry (53). The sector is also a leader in multi-factor authentication, with 31 percent adopting methods that require two or more pieces of evidence (or factors) as part of an authentication mechanism. image: https://businessinsights.bitdefender.com/hubfs/bank-password-security-1024x538.jpg --- [![](https://businessinsights.bitdefender.com/hubfs/2021/09/logo-white.svg)](https://businessinsights.bitdefender.com/?hsLang=en-us) [![CONTACT AN EXPERT](https://hubspot-no-cache-eu1-prod.s3.amazonaws.com/cta/default/341979/1d8885e9-1179-49b1-a5ec-9c75f5f670dd.png)](https://hubspot-cta-redirect-eu1-prod.s3.amazonaws.com/cta/redirect/341979/1d8885e9-1179-49b1-a5ec-9c75f5f670dd) - [For Home](https://www.bitdefender.com/solutions/) - [For Business](https://www.bitdefender.com/business/) - [Resources](https://www.bitdefender.com/business/resource-library.html) - [Webinars](https://www.bitdefender.com/business/webinars.html) # [BUSINESS INSIGHTS](https://businessinsights.bitdefender.com/?hsLang=en-us) By [**Filip Truta**](https://businessinsights.bitdefender.com/author/filip-truta) / Oct 03, 2018 # Half of Businesses Have Yet to Take Control of Password Security; Technology Sector Leads the Pack Share this [![Share on email](https://businessinsights.bitdefender.com/hubfs/2021/07/blog/email-color.png)](mailto:?subject=Check%20out%20https://businessinsights.bitdefender.com/half-of-businesses-have-yet-to-take-control-of-password-security-technology-sector-leads-the-pack&utm_medium=social&utm_source=email%20&body=Check%20out%20https://businessinsights.bitdefender.com/half-of-businesses-have-yet-to-take-control-of-password-security-technology-sector-leads-the-pack&utm_medium=social&utm_source=email) [![Share on twitter](https://businessinsights.bitdefender.com/hubfs/2021/07/blog/twitter-color.png)](https://twitter.com/intent/tweet?original_referer=https://businessinsights.bitdefender.com/half-of-businesses-have-yet-to-take-control-of-password-security-technology-sector-leads-the-pack&utm_medium=social&utm_source=twitter&url=https://businessinsights.bitdefender.com/half-of-businesses-have-yet-to-take-control-of-password-security-technology-sector-leads-the-pack&utm_medium=social&utm_source=twitter&source=tweetbutton&text=) [![Share on linkedin](https://businessinsights.bitdefender.com/hubfs/2021/07/blog/linkedin-color.png)](http://www.linkedin.com/shareArticle?mini=true&url=https://businessinsights.bitdefender.com/half-of-businesses-have-yet-to-take-control-of-password-security-technology-sector-leads-the-pack&utm_medium=social&utm_source=linkedin) [![Share on facebook](https://businessinsights.bitdefender.com/hubfs/2021/07/blog/facebook-color.png)](http://www.facebook.com/share.php?u=https://businessinsights.bitdefender.com/half-of-businesses-have-yet-to-take-control-of-password-security-technology-sector-leads-the-pack&utm_medium=social&utm_source=facebook) An enterprise’s first line of defense, experts agree, is the employee. And the first factor of enterprise authentication is the password. It takes a single untrained pair of eyes to fall for a phishing scam to let hackers into an infrastructure. Studies of employee behavior and password hygiene abound. The results are generally the same -- workers share passwords more often than they should, or use the same credentials for work and personal accounts across a plethora of devices. Experts have long warned of the risks posed by poor password hygiene, yet businesses still have a lot to improve on this aspect. “Despite the sophisticated security measures enterprises are putting in place, something as fundamentally simple as a password is tripping them up,” said Frank Dickson, Research Vice President, Security Products at IDC. LastPass anonymized and aggregated data from more than 43,000 organizations that use their product as their business password manager. The study gauges data from organizations of all types and sizes across nearly every industry, allowing for a big data set that gives researchers a more precise picture of password management. A key finding was that big companies typically have lower security scores than smaller companies. “Organizations with less than 25 employees had the highest average security score of 50, and the average drops as the company size increases,” the [report](http://globenewswire.com/news-release/2018/10/01/1587840/0/en/New-LastPass-Benchmark-Report-Finds-Nearly-50-Percent-of-Businesses-Have-Yet-to-Take-Control-of-Password-Security.html) reads. “More employees bring more passwords and unsanctioned apps, as well as extra opportunities for dangerous password behaviors. In larger organizations, it’s simply more challenging for IT to hold all employees to password security standards. ore on average.” The data further shows that any given employee shares six passwords with coworkers, making password sharing a bit too prevalent in the workplace. There’s good news too: multi-factor authentication is seeing an increasingly higher adoption rate. 45 percent of businesses now use multi-factor authentication, a significant increase from last year’s 24.5 percent, LastPass said. The technology industry is leading the pack in password security, with the highest average security score of any industry (53). The sector is also a leader in multi-factor authentication, with 31 percent adopting methods that require two or more pieces of evidence (or factors) as part of an authentication mechanism. “This is not surprising due to the privacy and data laws with which most must comply,” according to the report. “Whether it’s a greater awareness of available options or a stronger culture of security, organizations in the Technology sector are prioritizing extra protection.” Unfortunately, though, the same research uncovered that heavily regulated industries like Banking, Health, Insurance and Government are not achieving comparable results. ### Explore More Topics - [Enterprise Security (743)](https://businessinsights.bitdefender.com/topic/enterprise-security) - [Threat Research (201)](https://businessinsights.bitdefender.com/topic/threat-research) - [Cloud Security (174)](https://businessinsights.bitdefender.com/topic/cloud-security) - [SMB Security (170)](https://businessinsights.bitdefender.com/topic/smb-security) - [Ransomware (166)](https://businessinsights.bitdefender.com/topic/ransomware) - [Privacy and Data Protection (137)](https://businessinsights.bitdefender.com/topic/privacy-and-data-protection) - [Cybersecurity Awareness (134)](https://businessinsights.bitdefender.com/topic/cybersecurity-awareness) - [Endpoint Protection & Management (126)](https://businessinsights.bitdefender.com/topic/endpoint-protection-management) - [Endpoint Detection and Response (124)](https://businessinsights.bitdefender.com/topic/endpoint-detection-and-response) - [Managed Detection and Response (119)](https://businessinsights.bitdefender.com/topic/managed-detection-and-response) - [Virtualization & Data Center Security (82)](https://businessinsights.bitdefender.com/topic/virtualization-data-center-security) - [Threat Intelligence (76)](https://businessinsights.bitdefender.com/topic/threat-intelligence) - [IT Compliance & Regulations (71)](https://businessinsights.bitdefender.com/topic/it-compliance-regulations) - [Bitdefender Threat Debrief (55)](https://businessinsights.bitdefender.com/topic/bitdefender-threat-debrief) - [Managed Service Providers (53)](https://businessinsights.bitdefender.com/topic/managed-service-providers) - [#Featured (52)](https://businessinsights.bitdefender.com/topic/featured) - [Advanced Persistent Threats (46)](https://businessinsights.bitdefender.com/topic/advanced-persistent-threats) - [Events (38)](https://businessinsights.bitdefender.com/topic/events) - [Independent Testing (18)](https://businessinsights.bitdefender.com/topic/independent-testing) - [Cybersecurity Advisory Services (9)](https://businessinsights.bitdefender.com/topic/cybersecurity-advisory-services) - [Podcast (3)](https://businessinsights.bitdefender.com/topic/podcast) - [top (2)](https://businessinsights.bitdefender.com/topic/top) See all topics ### Subscribe to Blog Updates ## Read more about this topic ### [More Companies Adopt MFA, but It's Still Not Enough](https://businessinsights.bitdefender.com/more-companies-adopt-mfa-but-its-still-not-enough?hsLang=en-us) ### [Almost a Third of Companies in Europe and Middle East Still Rely on Classic Credentials for Security](https://businessinsights.bitdefender.com/almost-a-third-of-companies-in-europe-and-middle-east-still-rely-on-classic-credentials-for-security?hsLang=en-us) ### [How to Mitigate Human Errors for Better Data Security](https://businessinsights.bitdefender.com/how-mitigate-human-errors-better-data-security?hsLang=en-us) ![bitdefender](https://businessinsights.bitdefender.com/hs-fs/file-2685110570-png/Bitdefender-Mar2015-Theme/Images/avatar_img_footer.png) ![bitdefender](https://businessinsights.bitdefender.com/hs-fs/file-2676149282-png/Bitdefender-Mar2015-Theme/Images/logo_white_footer.png) - [![https://twitter.com/Bitdefender_Ent](https://businessinsights.bitdefender.com/hs-fs/file-2658233851-png/Bitdefender-Mar2015-Theme/Images/ft_soc_tw.png?width=33&name=ft_soc_tw.png)](https://twitter.com/Bitdefender_Ent) - [![Linkedin-icon-300x300](https://businessinsights.bitdefender.com/hs-fs/hubfs/Bitdefender-Mar2015-Theme/Images/Linkedin-icon-300x300.png?width=33&name=Linkedin-icon-300x300.png)](https://www.linkedin.com/company/bitdefender-gravityzone-enterprise-security) - [![](https://businessinsights.bitdefender.com/hs-fs/file-2676149307-png/Bitdefender-Mar2015-Theme/Images/ft_soc_yt.png)](https://www.youtube.com/user/BitdefenderSecurity) - [Legal Terms](https://www.bitdefender.com/legal/) - [Privacy Policy](https://www.bitdefender.com/site/view/legal-privacy-policy-for-bitdefender-websites.html) - [EULA](https://www.bitdefender.com/site/view/legal-eula.html) - [Contact Us](https://www.bitdefender.com/business/contact.html) Copyright © 1997-2023 Bitdefender All rights reserved. ![](https://px.spiceworks.com/px/5rec) ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Filip Truta", "url" : "https://businessinsights.bitdefender.com/author/filip-truta" }, "datePublished" : "2018-10-03T08:00:00.000Z", "headline" : "Half of Businesses Have Yet to Take Control of Password Security; Technology Sector Leads the Pack", "image" : [ "https://businessinsights.bitdefender.com/hubfs/bank-password-security-1024x538.jpg" ], "mainEntityOfPage" : { "@id" : "https://businessinsights.bitdefender.com/half-of-businesses-have-yet-to-take-control-of-password-security-technology-sector-leads-the-pack", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://businessinsights.bitdefender.com/hubfs/Bitdefender_Logo_Transparent-2.png" }, "name" : "Bitdefender" } } ```