This is a list of the most common passwords, discovered in various data breaches. Common passwords generally are not recommended on account of low password strength.[1]
List
NordPass
NordPass, a password manager, has released its sixth annual list of the 200 most common passwords, highlighting persistent trends in password selection.[2] The top twenty most frequently used passwords are:
Top 20 most common passwords according to NordPass
Rank
Password
Count of password uses
1
123456
3,018,050
2
123456789
1,625,135
3
12345678
884,740
4
password
692,151
5
qwerty123
642,638
6
qwerty1
583,630
7
111111
459,730
8
12345
395,573
9
secret
363,491
10
123123
351,576
11
1234567890
324,349
12
1234567
307,719
13
000000
250,043
14
qwerty
244,879
15
abc123
217,230
16
password1
211,932
17
iloveyou
197,880
18
11111111
195,237
19
dragon
144,670
20
monkey
139,150
SplashData
The Worst Passwords List is an annual list of the 25 most common passwords from each year as produced by internet security firm SplashData.[3] Since 2011, the firm has published the list based on data examined from millions of passwords leaked in data breaches, mostly in North America and Western Europe, over each year. In the 2016 edition, the 25 most common passwords made up more than 10% of the surveyed passwords, with the most common password of 2016, "123456", making up 4%.[4]
This article needs to be updated. The reason given is: What about years 2020-2025?. Please help update this article to reflect recent events or newly available information.(April 2025)
Top 25 most common passwords by year according to SplashData
Password manager Keeper compiled its own list of the 25 most common passwords in 2016, from 25 million passwords leaked in data breaches that year.[14]
The National Cyber Security Centre (NCSC) compiled its own list of the 20 most common passwords in 2019, from 100 million passwords leaked in data breaches that year.[15]
^ abThe presence of "adobe123" and "photoshop" on 2013's list was skewed by the large number of Adobe passwords included in the collected data due to a major security breach in 2013 that affected over 48 million Adobe users.[7][13]