Here Are the Worst Passwords of 2018

Splashdata has recently released its annual “Top 100 Worst Passwords” list for 2018, and the passwords used are still shocking as ever to see. Despite repeated warnings from cybersecurity experts on utilizing more complex, hard-to-guess passwords, the list still shows that the most popular choice for users is “123456”. Coming in at 2nd place is “password”. In these past five years, both passwords occupied the top of the list.

Popular name references have also been included as commonly used passwords, including “jordan”, “donald”, or “charlie”.

SplashData’s CEO Morgan Slain commented how, “Hackers have great success using celebrity names, terms from pop culture and sports, and simple keyboard patterns to break into accounts online, because they know so many people are using those easy-to-remember combinations.”

This “worst password” ranking is based on data gathered from more than 5 million passwords leaked from North America and Western Europe. Estimates have shown that 3 percent of people from the leaked accounts used the password “123456” and 10 percent had used at least one password from the Top 25.

It turns out not even breaking stories involving data breaches are enough to sway the population to strengthen their password choices.

As provided by SplashData’s list, here’s 25 of the worst passwords used in 2018:

1) 123456

2) password

3) 123456789

4) 12345678

5) 12345

6) 111111

7) 1234567

8) sunshine

9) qwerty

10) iloveyou

11) princess

12) admin

13) welcome

14) 666666

15) abc123

16) football

17) 123123

18) monkey

19) 654321

20) !@#$%^&*

21) charlie

22) aa123456

23) donald

24) password1

25) qwerty123

If any of these seem recognizable for your own accounts, we highly recommend you to update your password to something more complex. Phrases used with symbols and numbers ensure your account stays protected, as such passwords would be more difficult to guess. For example, rather than using a simple phrase like “technologyrocks”, use “T3chn0logyR0cks!” instead.

For the full list of the “Top 100 Worst Passwords of 2018,” see this post here.