The worlds most used passwords make sure yours isnt

The world’s most used passwords – make sure yours isn’t on the list

NordPass has discovered that “123456” is the worst password in the world.

Boris Zhitkov | moment | Getty Images

It can be tedious to rack your brains to come up with a strong password. However, if you want your email, online banking, and streaming platform credentials to be safe from the clutches of hackers, it’s wise to make the effort.

NordPass, the password management tool from the team behind NordVPN, has published its study of the 200 most commonly used passwords in 2023 in collaboration with independent researchers.

Of the 20 most common passwords in the world, 17 can be cracked in less than a second. So think twice before entering “123456” or the even more creative “password” to secure your online accounts.

The most popular passwords are some of the most convenient combinations, even as cybersecurity threats continue to grow, with over 53 million Americans affected in the first half of 2022, according to AAG data.

The NordPass study showed that 86% of cyberattacks use stolen credentials and that online accounts, emails and passwords account for nearly 20% of the most commonly sold items on the dark web.

To ensure your data stays safe, here are the 20 most common passwords in the world in 2023 – and how long it takes to crack each one:

The 20 most common passwords of 2023

passwordIt took a long time for it to crackFrequency of use
123456< 1 second4,524,867
Administrator< 1 second4,008,850
12345678< 1 second1,371,152
123456789< 1 second1,213,047
1234< 1 second969,811
12345< 1 second728,414
password< 1 second710,321
123< 1 second528,086
AA123456< 1 second319,725
1234567890< 1 second302,709
UNKNOWN17 minutes240,377
1234567< 1 second234,187
123123< 1 second224,261
111111 < 1 second191,392
password< 1 second177,725
12345678910 < 1 second172,502
000000 < 1 second168,653
admin123 11 seconds159,354

********

< 1 second152,497
user1 second146,233

“Admin,” which hasn’t been on the top 200 list in five years, landed in second place this year.

“It’s one of the passwords that people don’t change,” the report said. “Instead of improving password creation habits, Internet users have taken a different approach by sticking with pre-configured passwords.”

Despite some worthy competitors, “123456” has continued to top the rankings for the world’s most used password for the past five years.

“It was ranked as the most commonly used password four out of five times. ‘Password’ once had that not-so-noble title,” the report says.

For the first time, the study also identified the most common passwords by category.

The No. 1 password for e-commerce websites, email accounts, electronic devices and streaming services is also “123456,” while “UNKNOWN” ranked first for social media platforms, financial accounts and smartphones.

Names are also popular password options among users around the world.

“Isabella” is the second most used password in Austria this year, while “Katerina” is in 11th place in Greece.

A name and number combination, such as “Flores123” charted at No. 5 in Mexico and “Kento123!” was No. 17 in Malaysia.

The love of football among UK residents is reflected in their choice of passwords: the names of English Premier League football clubs “Liverpool”, “Arsenal” and “Chelsea” take 4th, 6th and 10th place respectively .

Of the 20 most common passwords in China, 11 were numbers only.

“Internet users in China often use numbers in their passwords. While ‘123456’ is the most commonly used password in the country, other number sequences such as ‘111111’, ‘000000’ and ‘12345678’ are also widely used,” NordPass highlighted.

On the other hand, users in the US found a preference for using harsh words, with “Shitbird” coming in at number 16.

  • Change your passwords regularly
  • Passwords should be at least 20 characters long and contain numbers, upper and lower case letters and special characters.
  • Do not use information such as birthdays, names or common words.
  • Don’t use the same password for more than one site.
  • Switch to passkeys, where you can use a fingerprint, facial scan, or PIN to access a device or application.
  • Do not miss: