We get it. You're busy, tired and just want to log in quickly - without fuss. But if your password is something like 123456, congratulations: you're at the top of every hacker's wish list.
And if you think you're safe because you've added an exclamation mark (password!) - then unfortunately we have some bad news for you.
In this article, we show you the worst passwords that are still used today, why they are a disaster with an announcement - and how you (and your company) can do better - with hardly any more effort.
Every year, IT security companies such as NordPass, Hive Systems and SplashData publish lists of the most frequently leaked, guessed and - frankly - most embarrassing passwords.
Here are the eternal frontrunners of bad decisions:
Honorable mentions: dragon, football, monkey, starwars.
(No kidding: someone is backing up their work email with starwars123.)
Because people are predictable.
If we are forced to create dozens of passwords, then:
Cyber criminals know this. That's why they rely on dictionary attacks and test masses of known weak passwords from leaks such as RockYou2021 - a collection of 8.4 billion passwords: RockYou2021: Largest Ever Password Compilation Leaked | Cybernews
Here's where it gets interesting (and worrying). According to the Hive Systems 2024 password table:
Hackers hardly ever try it manually anymore. They simply run bots through breach lists - and wait until a door opens.
Really?
A little mind game: Have you ever used...
...then you are at risk.
These combinations appear again and again in leak lists.
Even the appearance of uniqueness is no longer enough. S3cur3P@ssword is not safe when millions have had the same idea.
A good password is:
Example?
Something like: T$7p^z1L!xuKe39@
No hacker will get through that in your lifetime.
And no, you don't have to remember it. There are password managers for that (tip: we know a good one).
If you're trying to store your passwords in your head - you're doing it wrong.
Modern password managers such as SecureSafe Pass:
Bonus: You only have to remember a single master password. That's it.
No more sticky notes. No more Excel files called my_passwords_final2.xlsx.
Here is your challenge:
And then:
They will thank you for the next big leak.
Passwords should be no laughing matter - but unfortunately the worst ones are.
If your password appears on this list: It's time for an update. Become secure. Use a password manager.
Try SecureSafe Pass - and let us create unbreakable passwords for you. So that you are guaranteed not to end up on the "Worst Passwords" list next year.