Every year the guys at SplashData analyze millions of hacked and leaked passwords from websites and online services. They then publish this most commonly used passwords that they find.
It is never a good idea to use such obvious passwords because there is virtually no security. In fact, it is a common practice for hackers to simply run through the list of common passwords with multiple user names. Boom – they get access to your private information and can use it to gain more information and cause damage.
Here is the list.
1. 123456 The top password in use.
Reading an older article? Use the brief to stay current.
This Article Gives You the Background. The Brief Gives You What Changed Next.
Get the weekday cyber brief for new policy moves, CISA actions, and risk developments this article could not cover when it was published.
By subscribing you agree to our Privacy Policy.
Free. Weekday mornings. 5 minutes or less.
2. password At least it is easy to remember!
3. 123456789 A bit stronger than the #1 password 🙂
4. 1234567 A bit weaker 🙁
5. 12345 and the list goes on…
6. 111111 Don’t forget to change to 222222 the next time policy forces
7. 1234567 The number actually depends on the length requirement
8. sunshine
9. qwert
10. iloveyou
11. princes
Reading an older article? Use the brief to stay current.
This Article Gives You the Background. The Brief Gives You What Changed Next.
Get the weekday cyber brief for the developments, risk shifts, and new signals that changed the picture after this article was published.
By subscribing you agree to our Privacy Policy.
Free. Weekday mornings. 5 minutes or less.
12. admin
13. welcome
14. 666666
15. abc123
We found this list to be quite amusing. It is human nature for people to choose passwords that are easy to remember. Easy to remember passwords are often easy to guess.
This is one of the reasons that we think the use of passwords will eventually go away. In fact, one potential solution is outlined in Passwords Suck and Will Eventually Go Away.
Of course, MFA (Multi-factor Authentication) has been introduced to be the savior of the password weakness dilemma. But hackers are becoming more and more sophisticated. There are many flaws in MFA also! We will be introducing some of the vulnerabilities related to MFA soon. Hackers are actively exploiting MFA!
Newer CyberExperts coverage on this topic
This article still works as background. If you want the current picture, start with the freshest related coverage below and today's brief.
CMMC After the Phase 2 Suspension: What Contractors Still Have to Do in 2026
Short answer: on July 13, 2026, the Department of War suspended the move to CMMC Phase 2, which was due on November...
Blue Team Certifications (2026): CySA+, GCIA, BTL1 and SC-200 Compared
Blue team certifications compared from the issuers' own pages: CompTIA CySA+ V4, GIAC GCIA, BTL1 from Centri (Security Blue Team) and Microsoft...
Digital Forensics Certifications (2026): GCFA, CHFI, EnCE and CCE Compared
Digital forensics certifications compared from the issuers' own pages: GIAC GCFA and GCFE, EC-Council CHFI, OpenText EnCE and ISFCE CCE, with exam...
Monday’s brief: Ivanti’s last VPN fix is due today, then WordPress update attacks, a fake Claude Code extension and Drupal stores
The fastest way to catch up on what changed after this article was published.
Start your morning with the signal that matters.
Get the biggest cybersecurity developments, why they matter, and where to go deeper on CyberExperts.
By subscribing you agree to our Privacy Policy.
Free. Weekdays. Built for operators.
