2018 research proved that out of 3.5 billion exposed credentials, in 24% of cases, the same password was reused for different accounts and, in 90% of cases, the password was altered just a little bit.