In the leaked 2009 RockYou dataset, 4 people out of 32,603,387 picked ???2bon2btitq??? and 5 picked ???2bon2b.??? The roughly one-in-a-million probability sounds impressive, but it only puts people using these passwords in the 50th and 48th percentiles of security. In other words, Google???s advised password is more common than what half of users choose. There are about 500,000 more common passwords in the RockYou set-enough that ???2bon2btitq??? is unlikely to come up in an online guessing attack but not nearly enough to prevent instant cracking if leaked in hashed form.
Forgive the duplication, please.