Study: 2013 Trustwave Global Security Report
Date: February 22 2013

How long were the cracked passwords in corporate environments (n=2,961,120):

2%	5 characters
5%	6 characters
7%	7 characters
52%	8 characters
17%	9 characters
11%	10 characters
6%	11 characters
3%	12 characters

PasswordResearch.com Comment:
These percentages were based on observation of a password length chart that did not allow precise estimates. Expect figures listed above to be inaccurate by up to +/- 3 percentage points. Shorter and longer passwords were also present in the graph, but accounted for a small percent of the overall total.