Almost one in 10 people use the same four-digit PIN