List of the most common passwords

This is a list of the most common passwords, discovered in various data breaches. Common passwords generally are not recommended on account of low password strength.^[1]

List

NordPass

NordPass, a password manager, has released its sixth annual list of the 200 most common passwords, highlighting persistent trends in password selection.^[2] The top twenty most frequently used passwords are:

Top 20 most common passwords according to NordPass

Rank	Password
1	123456
2	123456789
3	12345678
4	password
5	qwerty123
6	qwerty1
7	111111
8	12345
9	secret
10	123123
11	abc123
12	password1
13	letmein
14	1q2w3e4r
15	monkey
16	qwerty
17	123qwe
18	1234
19	iloveyou
20	123321

SplashData

The Worst Passwords List is an annual list of the 25 most common passwords from each year as produced by internet security firm SplashData.^[3] Since 2011, the firm has published the list based on data examined from millions of passwords leaked in data breaches, mostly in North America and Western Europe, over each year. In the 2016 edition, the 25 most common passwords made up more than 10% of the surveyed passwords, with the most common password of 2016, "123456", making up 4%.^[4]

Top 25 most common passwords by year according to SplashData

Rank	2011[5]	2012[6]	2013[7]	2014[8]	2015[9]	2016[4]	2017[10]	2018[11]	2019[12]
1	password	password	123456	123456	123456	123456	123456	123456	123456
2	123456	123456	password	password	password	password	password	password	123456789
3	12345678	12345678	12345678	12345	12345678	12345	12345678	123456789	qwerty
4	qwerty	abc123	qwerty	12345678	qwerty	12345678	qwerty	12345678	password
5	abc123	qwerty	abc123	qwerty	12345	football	12345	12345	1234567
6	monkey	monkey	123456789	123456789	123456789	qwerty	123456789	111111	12345678
7	1234567	letmein	111111	1234	football	1234567890	letmein	1234567	12345
8	letmein	dragon	1234567	baseball	1234	1234567	1234567	sunshine	iloveyou
9	trustno1	111111	iloveyou	dragon	1234567	princess	football	qwerty	111111
10	dragon	baseball	adobe123[a]	football	baseball	1234	iloveyou	iloveyou	123123
11	baseball	iloveyou	123123	1234567	welcome	login	admin	princess	abc123
12	111111	trustno1	admin	monkey	1234567890	welcome	welcome	admin	qwerty123
13	iloveyou	1234567	1234567890	letmein	abc123	solo	monkey	welcome	1q2w3e4r
14	master	sunshine	letmein	abc123	111111	abc123	login	666666	admin
15	sunshine	master	photoshop[a]	111111	1qaz2wsx	admin	abc123	abc123	qwertyuiop
16	ashley	123123	1234	mustang	dragon	121212	starwars	football	654321
17	bailey	welcome	monkey	access	master	flower	123123	123123	555555
18	passw0rd	shadow	shadow	shadow	monkey	passw0rd	dragon	monkey	lovely
19	shadow	ashley	sunshine	master	letmein	dragon	passw0rd	654321	7777777
20	123123	football	12345	michael	login	sunshine	master	!@#$%^&*	welcome
21	654321	jesus	password1	superman	princess	master	hello	charlie	888888
22	superman	michael	princess	696969	qwertyuiop	hottie	freedom	aa123456	princess
23	qazwsx	ninja	azerty	123123	solo	loveme	whatever	donald	dragon
24	michael	mustang	trustno1	batman	passw0rd	zaq1zaq1	qazwsx	password1	password1
25	Football	password1	000000	trustno1	starwars	password1	trustno1	qwerty123	123qwe

Keeper

Password manager Keeper compiled its own list of the 25 most common passwords in 2016, from 25 million passwords leaked in data breaches that year.^[14]

Top 25 most common passwords according to Keeper

Rank	2016[14]
1	123456
2	123456789
3	qwerty
4	12345678
5	111111
6	1234567890
7	1234567
8	password
9	123123
10	987654321
11	qwertyuiop
12	mynoob
13	123321
14	666666
15	18atcskd2w
16	7777777
17	1q2w3e4r
18	654321
19	555555
20	3rjs1la7qe
21	google
22	1q2w3e4r5t
23	123qwe
24	zxcvbnm
25	1q2w3e

National Cyber Security Centre

The National Cyber Security Centre (NCSC) compiled its own list of the 20 most common passwords in 2019, from 100 million passwords leaked in data breaches that year.^[15]

Top 20 most common passwords according to NCSC

Rank	2019[15]
1	123456
2	123456789
3	qwerty
4	password
5	1111111
6	12345678
7	abc123
8	1234567
9	password1
10	12345
11	1234567890
12	123123
13	000000
14	Iloveyou
15	1234
16	1q2w3e4r5t
17	Qwertyuiop
18	123
19	Monkey
20	Dragon

See also

• Password cracking
• Wikipedia:10,000 most common passwords

Notes

1. The presence of "adobe123" and "photoshop" on 2013's list was skewed by the large number of Adobe passwords included in the collected data due to a major security breach in 2013 that affected over 48 million Adobe users.^[7][13]

References

1. Titcomb, James (March 23, 2016). "Do you have one of the most common passwords? They're ridiculously easy to guess". The Telegraph. Retrieved May 1, 2017.
2. "Top 200 Most Common Passwords". NordPass. Archived from the original on January 30, 2025. Retrieved February 5, 2025.
3. Mastroianni, Brian (January 20, 2016). "These were the 25 worst passwords of 2015". CBS News.
4. Bruner, Raisa (January 23, 2017). "The 25 Worst Passwords You Should Never Use". TIME.
5. Ho, Erica (November 22, 2011). "The 25 Most Popular (and Worst) Passwords of 2011". TIME.
6. Waxman, Olivia B. (October 25, 2012). "The 25 worst passwords of 2012". CNN. Archived from the original on October 31, 2012.
7. Newman, Jared (January 20, 2014). "The 25 worst passwords of 2013: 'password' gets dethroned". PC World.
8. Waxman, Olivia (January 20, 2015). "These Are The 25 Worst Passwords of 2014". TIME.
9. Chang, Lulu (January 19, 2016). "Wookie mistake: 'starwars' is now one of the world's 25 worst passwords". Digital Trends.
10. Korosec, Kirsten (December 19, 2017). "The 25 Most Common Passwords of 2017 Include 'Star Wars'". FORTUNE.
11. Ehrenkranz, Melanie (December 13, 2018). "The 25 Most Popular Passwords of 2018 Will Make You Feel Like a Security Genius". Gizmodo.
12. Keck, Catie (December 18, 2019). "It's Time to Nervously Mock the 50 Worst Passwords of the Year". Gizmodo.
13. Kelly, Heather (January 22, 2014). "'123456' tops list of worst passwords". CNN.
14. McGoogan, Cara (January 16, 2017). "The world's most common passwords revealed: Are you using them?". The Daily Telegraph.
15. "NCSC Reveals List Of World's Most Hacked Passwords". Forbes. Retrieved November 6, 2023.

External links

• Skullsecurity list of breached password collections
• Have I Been Pwned list of passwords that have appeared in data breaches, hosted by NCSC