Back
Top 20 Most Popular Passwords
Having spoken with many security experts over the years, I've been amazed by tales of security carelessness. One common practice among the cubicle class: writing their password on little sticky notes pasted to their monitor.
But that's downright encrypted compared with the passwords people create. Researchers from Imperva
analyzed 32 million hacked passwords from the recent breach at
RockYou.com. They found the most common password is -- drum roll, please -- "
123456".
Wow, seriously? That's as original as you can get? Just type the first six numbers in succession?
But guess what? Even that shows more effort than the No. 2 most popular password: "12345". I guess adding the "6" was too much effort.
At No. 3 were a group of users who were far more industrious, if no less careful: "123456789".
For your reading amusement, here are the Top 20 Most Popular Passwords -- not a popularity list you want to be on:

- 123456
- 12345
- 123456789
- Password
- iloveyou [I appreciate these folks. They clearly believe in the power of love. But I'm worried about their family savings accounts.]
- princess
- rockyou
- 1234567
- 12345679
- abc123
- Nicole
- Daniel
- babygirl
- monkey [My personal favorite highly hackable password. I mean, really, monkey?]
- Jessica
- Lovely
- michael
- Ashley
- 654321 [Tricky, huh? It's the numbers...backwards! No one will ever figure that out!]
- Qwerty
Two factors are heading toward each other, like freight trains charging toward an explosive crash: 1) The password cracking software used by hackers is getting ever more sophisticated, and 2) Users keep creating weak passwords, year after year. The Impreva findings cited two studies ten years apart that showed no improvement in passwords.
This mix of automated software and poor passwords means that "In just 110 attempts, a hacker will typically gain access to one new account in every second or a mere 17 minutes to break into 1,000 accounts," Impreva states. A sobering thought.
In fairness, it's a hassle to create a truly strong password. It should be at least 7 characters long, contain no complete dictionary words (or your name or pet name) and contain a mix of upper and lowercase, numerals and symbols. For instance:
A*t34eO4>u
But who can remember that? I'd rather just use "monkey".
This article was written by James McGuire of Internet.com. You can find the original article here.
Last modified about about 1 month ago.
You May Also Like...
- What's New
What are the latest changes to this site?
- Get Rid of Cable With TiVo and a Converter Box
In January 2009 I decided to use an HDTV converter box, an antenna, and a TiVo to watch free TV using only the digital signal sent to my house. I canceled my cable account and I am now enjoying my favorite shows using only the setup described here.
- FreeBSD Partition Types
For you FreeBSDies who need a quick way to look up the numeric partition ID for FreeBSD's fdisk.
- Popular Pages
What are the most popular pages on this site for this week and all time?
- Blog
My blog--where I put quick thoughts and ideas that don't necessarily fit on a Paultastic page.