List of the most common passwords

Last updated

This is a list of the most common passwords , discovered in various data breaches. Common passwords generally are not recommended on account of low password strength. [1]

Contents

List

NordPass

NordPass, a password manager, has released its sixth annual list of the 200 most common passwords, highlighting persistent trends in password selection. [2] The top twenty most frequently used passwords are:

Top 20 most common passwords according to NordPass
RankPasswordCount of password uses
11234563,018,050
21234567891,625,135
312345678884,740
4password692,151
5qwerty123642,638
6qwerty1583,630
7111111459,730
812345395,573
9secret363,491
10123123351,576
111234567890324,349
121234567307,719
13000000250,043
14qwerty244,879
15abc123217,230
16password1211,932
17iloveyou197,880
1811111111195,237
19dragon144,670
20monkey139,150

SplashData

The Worst Passwords List is an annual list of the 25 most common passwords from each year as produced by internet security firm SplashData. [3] Since 2011, the firm has published the list based on data examined from millions of passwords leaked in data breaches, mostly in North America and Western Europe, over each year. In the 2016 edition, the 25 most common passwords made up more than 10% of the surveyed passwords, with the most common password of 2016, "123456", making up 4%. [4]

Top 25 most common passwords by year according to SplashData
Rank2011 [5] 2012 [6] 2013 [7] 2014 [8] 2015 [9] 2016 [4] 2017 [10] 2018 [11] 2019 [12]
1passwordpassword123456123456123456123456123456123456123456
2123456123456passwordpasswordpasswordpasswordpasswordpassword123456789
312345678123456781234567812345123456781234512345678123456789qwerty
4qwertyabc123qwerty12345678qwerty12345678qwerty12345678password
5abc123qwertyabc123qwerty12345football12345123451234567
6monkeymonkey123456789123456789123456789qwerty12345678911111112345678
71234567letmein1111111234football1234567890letmein123456712345
8letmeindragon1234567baseball123412345671234567sunshineiloveyou
9trustno1111111iloveyoudragon1234567princessfootballqwerty111111
10dragonbaseballadobe123 [a] footballbaseball1234iloveyouiloveyou123123
11baseballiloveyou1231231234567welcomeloginadminprincessabc123
12111111trustno1adminmonkey1234567890welcomewelcomeadminqwerty123
13iloveyou12345671234567890letmeinabc123solomonkeywelcome1q2w3e4r
14mastersunshineletmeinabc123111111abc123login666666admin
15sunshinemasterphotoshop [a] 1111111qaz2wsxadminabc123abc123qwertyuiop
16ashley1231231234mustangdragon121212starwarsfootball654321
17baileywelcomemonkeyaccessmasterflower123123123123555555
18passw0rdshadowshadowshadowmonkeypassw0rddragonmonkeylovely
19shadowashleysunshinemasterletmeindragonpassw0rd6543217777777
20123123football12345michaelloginsunshinemaster!@#$%^&*welcome
21654321jesuspassword1supermanprincessmasterhellocharlie888888
22supermanmichaelprincess696969qwertyuiophottiefreedomaa123456princess
23qazwsxninjaazerty123123sololovemewhateverdonalddragon
24michaelmustangtrustno1batmanpassw0rdzaq1zaq1qazwsxpassword1password1
25Footballpassword1000000trustno1starwarspassword1trustno1qwerty123123qwe

Keeper

Password manager Keeper compiled its own list of the 25 most common passwords in 2016, from 25 million passwords leaked in data breaches that year. [14]

Top 25 most common passwords according to Keeper
Rank2016 [14]
1123456
2123456789
3qwerty
412345678
5111111
61234567890
71234567
8password
9123123
10987654321
11qwertyuiop
12mynoob
13123321
14666666
1518atcskd2w
167777777
171q2w3e4r
18654321
19555555
203rjs1la7qe
21google
221q2w3e4r5t
23123qwe
24zxcvbnm
251q2w3e

National Cyber Security Centre

The National Cyber Security Centre (NCSC) hosts a list, compiled by Troy Hunt of Have I Been Pwned?, of the top 100 thousand passwords leaked in data breaches as of 2019. [15]

Top 20 most common passwords according to NCSC and HIBP
Rank2019 [15]
1123456
2123456789
3qwerty
4password
51111111
612345678
7abc123
81234567
9password1
1012345
111234567890
12123123
13000000
14Iloveyou
151234
161q2w3e4r5t
17Qwertyuiop
18123
19Monkey
20Dragon

See also

Notes

  1. 1 2 The presence of "adobe123" and "photoshop" on 2013's list was skewed by the large number of Adobe passwords included in the collected data due to a major security breach in 2013 that affected over 48 million Adobe users. [7] [13]

References

  1. Titcomb, James (March 23, 2016). "Do you have one of the most common passwords? They're ridiculously easy to guess". The Telegraph. Retrieved May 1, 2017.
  2. "Top 200 Most Common Passwords". NordPass. Archived from the original on March 31, 2025. Retrieved April 3, 2025.
  3. Mastroianni, Brian (January 20, 2016). "These were the 25 worst passwords of 2015". CBS News.
  4. 1 2 Bruner, Raisa (January 23, 2017). "The 25 Worst Passwords You Should Never Use". TIME.
  5. Ho, Erica (November 22, 2011). "The 25 Most Popular (and Worst) Passwords of 2011". TIME.
  6. Waxman, Olivia B. (October 25, 2012). "The 25 worst passwords of 2012". CNN. Archived from the original on October 31, 2012.
  7. 1 2 Newman, Jared (January 20, 2014). "The 25 worst passwords of 2013: 'password' gets dethroned". PC World .
  8. Waxman, Olivia (January 20, 2015). "These Are The 25 Worst Passwords of 2014". TIME.
  9. Chang, Lulu (January 19, 2016). "Wookie mistake: 'starwars' is now one of the world's 25 worst passwords". Digital Trends .
  10. Korosec, Kirsten (December 19, 2017). "The 25 Most Common Passwords of 2017 Include 'Star Wars'". FORTUNE.
  11. Ehrenkranz, Melanie (December 13, 2018). "The 25 Most Popular Passwords of 2018 Will Make You Feel Like a Security Genius". Gizmodo.
  12. Keck, Catie (December 18, 2019). "It's Time to Nervously Mock the 50 Worst Passwords of the Year". Gizmodo.
  13. Kelly, Heather (January 22, 2014). "'123456' tops list of worst passwords". CNN .
  14. 1 2 McGoogan, Cara (January 16, 2017). "The world's most common passwords revealed: Are you using them?". The Daily Telegraph .
  15. 1 2 "NCSC Reveals List Of World's Most Hacked Passwords". Forbes. Retrieved November 6, 2023.