A new security report shows that millions of people still use weak and unsafe passwords. If your password is on this list, you should change it immediately.
Cybersecurity experts have published a list of the most common passwords found in leaked data. These passwords are easy to guess and allow hackers to access your accounts in seconds.
Even strong security habits like avoiding phishing or using anti-virus software won’t help if your password is this weak.
🚨 Top 20 Most Common and Unsafe Passwords
- 123456
- 123456789
- 12345678
- password
- qwerty123
- qwerty1
- 111111
- 12345
- secret
- 123123
- 1234567890
- 1234567
- 000000
- qwerty
- abc123
- password1
- iloveyou
- 11111111
- dragon
- monkey
If your password is on this list, it can be cracked in seconds. Even words like “dragon” or “monkey” are too easy to guess.
🏢 Bad Passwords by Industry
Some of the worst passwords were also found in business accounts. Here are some examples by sector:
Finance:
- ABCDEF
- 123456
- user0123
Healthcare:
- fabrizio19
- 123456
- Melu3012345
Technology:
- 123456
- 12345678
- Prithiviraj021
Transport:
- 123456
- vish
- Cbd@ryder#2023
These weak passwords put sensitive data at risk across many industries.
🌍 Weak Passwords by Country
United States:
- password
- 123456
- qwerty123
United Kingdom:
- password
- 123456
- qwerty
India:
- 123456
- password
- admin
If you’re in any of these countries and use one of these passwords, change it now.
🔐 Weak PIN Codes You Should Avoid
Your four-digit PIN code is just as important as your password. Researchers analyzed nearly 30 million PINs and found that many people use easy-to-guess codes like:
- 1234
- 0000
- 1111
- 2222
- 1212
- 4321
- 6969
- 7777
- 9999
- 2580
If your phone’s PIN is on this list, it can be cracked in under a second using AI tools.
✅ What You Should Do Now
- Stop using common passwords and PINs.
- Use a password manager to create strong, random passwords.
- Switch to passkeys, which are more secure and easier to use.
- Avoid using dates or repeated numbers in PINs.
Act now before your accounts get hacked.