19 Most Common Passwords Used Online

By Adam Garcia | Published

Related:
15 Strange Things People Have Tried to Ban (And Failed)

When creating online accounts, millions of people worldwide continue to make the same risky mistake. They choose passwords that are so obvious that hackers can figure them out in a matter of seconds, exposing financial information, personal information, and entire digital identities.

These are the top 19 passwords that still pose a major risk to internet users.

123456

DepositPhotos

For more than ten years, this straightforward string of numbers has topped lists of password leaks. Cybercriminals love it for the same reason that people do: it’s quick to type and easy to remember. Tens of millions of accounts still use it, according to security researchers, demonstrating that convenience continues to triumph over prudence.

Password

DepositPhotos

There aren’t many more ironic options. It’s like taping a spare key to the front door when you use “password” as your password. Despite numerous warnings, it remains one of the most popular logins for social media, work systems, and email accounts.

Like Go2Tutors’s content? Follow us on MSN.

123456789

DepositPhotos
DepositPhotos

“123456” appears stronger when three more digits are added. In actuality, though, it’s just an extended form of the same recognizable pattern. It is processed in a matter of seconds by automated hacking tools.

12345678

DepositPhotos
DepositPhotos

Many sites ask for at least eight characters, which makes this variation popular. Unfortunately, adding two extra digits doesn’t provide real protection—it’s still one of the weakest choices out there.

12345

DepositPhotos

This shorter form refuses to disappear. People pick it because it feels quick yet sufficient. In reality, it’s barely a speed bump for hackers, showing up again and again in massive data leaks.

Like Go2Tutors’s content? Follow us on MSN.

111111

DepositPhotos
DepositPhotos

Six identical digits might look clever at a glance, but repetition is one of the easiest patterns for computers to crack. Hackers can test this instantly, which is why it consistently ranks among the most broken passwords.

1234567

DepositPhotos
DepositPhotos

Some think stopping at seven digits instead of eight somehow makes their login unique. The problem: it’s just another basic sequence. Predictability doesn’t improve with a single added number.

Sunshine

DepositPhotos
DepositPhotos

A word that feels cheerful and memorable—but that’s exactly why it’s so common. “Sunshine” regularly turns up in breach reports, showing how popular culture and positive associations can work against security.

Like Go2Tutors’s content? Follow us on MSN.

qwerty

DepositPhotos
DepositPhotos

This comes straight from the top row of a standard keyboard. People pick it for convenience, but criminals know it by heart. “Qwerty” has been one of the most recycled weak passwords for decades.

Iloveyou

DepositPhotos
DepositPhotos

A sentimental choice that has stuck around since the early days of the internet. It’s easy to type, easy to remember, and all too easy to hack. Romance aside, it doesn’t keep accounts safe.

princess

DepositPhotos
DepositPhotos

A word drawn from fairy tales, usernames, and pop culture. Parents, gamers, and younger users often pick it, but its popularity makes it just as unsafe as any simple number string.

Like Go2Tutors’s content? Follow us on MSN.

admin

DepositPhotos
DepositPhotos

This one shows up everywhere, especially in default system setups. Many people never bother to change it, which is why it’s among the first options hackers try when attacking networks or devices.

welcome

DepositPhotos
DepositPhotos

A friendly greeting often chosen by new users. It feels like a good “starter” password, but friendliness isn’t the same as security. It’s consistently ranked among the weakest.

666666

DepositPhotos
DepositPhotos

This row of sixes is surprisingly common, whether for superstition, fashion, or simply because it looks nice. Sadly, hackers anticipate it and there isn’t much of a barrier.

Like Go2Tutors’s content? Follow us on MSN.

ABC123

DepositPhotos
DepositPhotos

At first glance, it seems a bit more creative: letters plus numbers. Actually, it’s one of the first combinations that brute-force attacks look at. Simple intrusions follow from simple reasoning.

654321

DepositPhotos
DepositPhotos

Even though reversing “123456” might seem unusual, attackers can test it just as quickly. In actuality, the reverse order is nearly as common as the forward one.

123123

DepositPhotos
DepositPhotos

The pattern created by doubling “123” is easily remembered by humans, but because machines can detect repetition quickly, it is often found in hacked account lists.

Like Go2Tutors’s content? Follow us on MSN.

Soccer

DepositPhotos
DepositPhotos

Given that football is the most popular sport in the world, it is not surprising that “soccer” appears frequently in breach databases. However, security does not equate to game passion.

000000000

DepositPhotos
DepositPhotos

A password with six zeros is about as weak as it gets. The spotless pattern appeals to people who want simplicity, but it’s one of the least secure logins imaginable.

The Reality Check

DepositPhotos
DepositPhotos

These instances all demonstrate the same trend: people routinely forego actual security in favor of temporary convenience. Each of these passwords is a wager that is unlikely to be noticed by criminals. The losses extend beyond compromised accounts or stolen data; they also undermine trust in the very systems that depend on more intelligent password selection.

Like Go2Tutors’s content? Follow us on MSN.

More from Go2Tutors!

DepositPhotos

Like Go2Tutors’s content? Follow us on MSN.