Each year, SplashData., Inc, a leader in password management, analyses leaked passwords to find the top commonly used passwords. In 2018, SplashData, Inc. had five million passwords to work from, most of them from hacks in the US and Europe. According to the statistics, almost 10% of people have used at least one common password on the list, and nearly 3% have used the worst offender, 123456 at some time this year.
Cracking passwords is not that easy when your server is properly secured in the first place. Choosing a secure password by itself is not enough if your server is not protected properly. Talk to your IT support company to ensure that your email, workstations, and servers are fully protected and secure. Request Consultation »
Top 100 passwords of 2018
Ranking Order | Alphabetical Order | |||
1 | 123456 | 52 | 1234 | |
2 | password | 71 | 1989 | |
3 | 123456789 | 73 | 1990 | |
4 | 12345678 | 78 | 1991 | |
5 | 12345 | 99 | 1992 | |
6 | 111111 | 5 | 12345 | |
7 | 1234567 | 47 | 55555 | |
8 | sunshine | 6 | 111111 | |
9 | qwerty | 27 | 121212 | |
10 | iloveyou | 17 | 123123 | |
11 | princess | 1 | 123456 | |
12 | admin | 40 | 222222 | |
13 | welcome | 19 | 654321 | |
14 | 666666 | 14 | 666666 | |
15 | abc123 | 7 | 1234567 | |
16 | football | 55 | 12341234 | |
17 | 123123 | 4 | 12345678 | |
18 | monkey | 3 | 123456789 | |
19 | 654321 | 20 | !@#$%^&* | |
20 | !@#$%^&* | 86 | 1q2w3e | |
21 | charlie | 59 | 1qaz2wsx | |
22 | aa123456 | 22 | aa123456 | |
23 | donald | 85 | aaaaaa | |
24 | password1 | 15 | abc123 | |
25 | qwerty123 | 44 | abcdef | |
26 | zxcvbnm | 12 | admin | |
27 | 121212 | 92 | admin123 | |
28 | bailey | 72 | amanda | |
29 | freedom | 58 | andrea | |
30 | shadow | 56 | andrew | |
31 | passw0rd | 82 | ashley | |
32 | baseball | 28 | bailey | |
33 | buster | 75 | banana | |
34 | daniel | 83 | bandit | |
35 | hannah | 32 | baseball | |
36 | thomas | 100 | biteme | |
37 | summer | 66 | blahblah | |
38 | george | 33 | buster | |
39 | harley | 21 | charlie | |
40 | 222222 | 62 | cheese | |
41 | jessica | 76 | chelsea | |
42 | ginger | 63 | computer | |
43 | letmein | 81 | cookie | |
44 | abcdef | 64 | corvette | |
45 | solo | 90 | dallas | |
46 | jordan | 34 | daniel | |
47 | 55555 | 23 | donald | |
48 | tigger | 61 | ferrari | |
49 | joshua | 16 | football | |
50 | pepper | 29 | freedom | |
51 | sophie | 38 | george | |
52 | 1234 | 42 | ginger | |
53 | robert | 35 | hannah | |
54 | matthew | 39 | harley | |
55 | 12341234 | 68 | hello | |
56 | andrew | 89 | hockey | |
57 | lakers | 70 | hunter | |
58 | andrea | 10 | iloveyou | |
59 | 1qaz2wsx | 74 | jennifer | |
60 | starwars | 41 | jessica | |
61 | ferrari | 46 | jordan | |
62 | cheese | 49 | joshua | |
63 | computer | 84 | killer | |
64 | corvette | 57 | lakers | |
65 | mercedes | 43 | letmein | |
66 | blahblah | 94 | liverpool | |
67 | maverick | 98 | london | |
68 | hello | 54 | matthew | |
69 | nicole | 67 | maverick | |
70 | hunter | 65 | mercedes | |
71 | 1989 | 80 | merlin | |
72 | amanda | 18 | monkey | |
73 | 1990 | 69 | nicole | |
74 | jennifer | 31 | passw0rd | |
75 | banana | 2 | password | |
76 | chelsea | 24 | password1 | |
77 | ranger | 50 | pepper | |
78 | 1991 | 11 | princess | |
79 | trustno1 | 93 | pussy | |
80 | merlin | 95 | querty | |
81 | cookie | 9 | qwerty | |
82 | ashley | 25 | qwerty123 | |
83 | bandit | 77 | ranger | |
84 | killer | 53 | robert | |
85 | aaaaaa | 30 | shadow | |
86 | 1q2w3e | 97 | soccer | |
87 | zaq1zaq1 | 45 | solo | |
88 | test | 51 | sophie | |
89 | hockey | 60 | starwars | |
90 | dallas | 37 | summer | |
91 | whatever | 8 | sunshine | |
92 | admin123 | 88 | test | |
93 | pussy | 36 | thomas | |
94 | liverpool | 48 | tigger | |
95 | querty | 79 | trustno1 | |
96 | william | 13 | welcome | |
97 | soccer | 91 | whatever | |
98 | london | 96 | william | |
99 | 1992 | 87 | zaq1zaq1 | |
100 | biteme | 26 | zxcvbnm | |
Is your password secure? Check with a Password Meter » |
Guidelines on Authentication Management:
- User IDs and passwords should be unique to each user
- Passwords should always be encrypted, in rest and in transit
- Passwords should be long: 8 character passwords is the absolute minimum; 10-12 characters or longer is recommended
- Password should be strong: avoid choosing those that are simple and easy-to-guess or remember, such as anything that can be found in a dictionary or is sequential, such as “password123”, “letmein”, “jesuschrist” or “abcabcabc”)
- Implement Delays between login attempts
- Lock account after a number of failed attempts
- Implement Two-factor authentication, where users must also enter a code, or go through a “I am not a robot” process to authenticate as a human vs. password-cracking software
It is highly recommended that organizations, especially those in the industries such as healthcare, law, or manufacturing, adopt these guidelines and adhere to a proper password policy for the organizations’ best overall security posture.
Explore the Benefit of professional IT for your [geoip_detect2 property=”state”] organization
The rapid development of information technology and the wide availability of personal computers combined with email, the Internet, and medical literature retrieval applications have altered the way professionals are able to learn and operate within the field of their services.
Technological advancements can be applied to many aspects of business. However, you must be aware and learn about the innovative information technology available, in order to take advantage of the benefits.
If your organization is located in New Jersey, New York Metro or nearby regions, let’s meet in person and arrange for an assessment of your current IT infrastructure; we’ll provide you with more information about our IT services and solutions that can secure and enhance your business process.
Give us a call at (855) 551-7760 ext. 311 right now, or send us a Consultation Request »
How is your state of IT? Call Us: (855) 551-7760 with any questions.