The 100 Worst Passwords
You Must Stop Using in 2026

Every year, billions of credentials are leaked onto the dark web. Despite endless security warnings, people continue to use shockingly predictable passwords. Are you using one of them?

Don't Wait Until It's Too Late.

A hacker's software can breach an 8-character lowercase password in literally 0.01 seconds. Generate an unbreakable, cryptographically secure password right now for free.

Generate a Secure Password

The Global Top 100 Worst Passwords

The data below is aggregated from millions of publicly leaked databases and data breaches globally. If you use *any* of the passwords on this list, your account is already functionally compromised.

Rank	Compromised Password	Time to Crack	Exposure Count
#1	123456	Instant	124.5M times
#2	password	Instant	87.1M times
#3	12345678	Instant	33.2M times
#4	qwerty	Instant	27.4M times
#5	123456789	Instant	23.8M times
#6	12345	Instant	19.9M times
#7	1234	Instant	15.2M times
#8	111111	Instant	14.0M times
#9	1234567	Instant	12.8M times
#10	dragon	Instant	9.4M times
#11	123123	Instant	9.0M times
#12	iloveyou	Instant	8.7M times
#13	admin	Instant	7.9M times
#14	monkey	Instant	6.5M times
#15	sunshine	Instant	5.2M times
#16	letmein	Instant	4.8M times
#17	abc123	Instant	4.4M times
#18	password123	Instant	4.1M times
#19	football	Instant	3.8M times
#20	princess	Instant	3.2M times
#21	1234567890	Instant	3.0M times
#22	Welcome	Instant	2.8M times
#23	welcome	Instant	2.7M times
#24	666666	Instant	2.5M times
#25	superman	Instant	2.4M times
#26	love	Instant	2.3M times
#27	qazwsx	Instant	2.2M times
#28	baseball	Instant	2.0M times
#29	ashley	Instant	1.9M times
#30	1234567890	Instant	1.8M times
#31	michael	Instant	1.7M times
#32	computer	Instant	1.6M times
#33	mustang	Instant	1.5M times
#34	jessica	Instant	1.4M times
#35	jordan	Instant	1.3M times
#36	qwertyuiop	Instant	1.2M times
#37	shadow	Instant	1.1M times
#38	batman	Instant	1.09M times
#39	joshua	Instant	1.07M times
#40	charlie	Instant	1.05M times
#41	daniel	Instant	1.03M times
#42	matthew	Instant	1.02M times
#43	master	Instant	990K times
#44	pokemon	Instant	960K times
#45	a1b2c3d4	Instant	950K times
#46	mypassword	Instant	920K times
#47	welcome1	Instant	890K times
#48	ninja	Instant	860K times
#49	112233	Instant	830K times
#50	naruto	Instant	810K times
#51	killer	Instant	790K times
#52	starwars	Instant	770K times
#53	hannah	Instant	760K times
#54	asdfgh	Instant	750K times
#55	secret	Instant	740K times
#56	andrew	Instant	720K times
#57	william	Instant	710K times
#58	amanda	Instant	690K times
#59	anthony	Instant	670K times
#60	justin	Instant	650K times
#61	sarah	Instant	640K times
#62	hunter	Instant	630K times
#63	thomas	Instant	610K times
#64	chris	Instant	590K times
#65	taylor	Instant	570K times
#66	cheese	Instant	560K times
#67	jennifer	Instant	550K times
#68	robert	Instant	540K times
#69	qwerty123	Instant	520K times
#70	david	Instant	510K times
#71	snoopy	Instant	500K times
#72	cookie	Instant	490K times
#73	peanut	Instant	480K times
#74	brandon	Instant	470K times
#75	whatever	Instant	450K times
#76	alexander	Instant	440K times
#77	summer	Instant	430K times
#78	spring	Instant	420K times
#79	winter	Instant	410K times
#80	autumn	Instant	400K times
#81	123321	Instant	390K times
#82	password!	Instant	380K times
#83	system	Instant	370K times
#84	qwerty1234	Instant	360K times
#85	123123123	Instant	350K times
#86	1q2w3e	Instant	340K times
#87	7777777	Instant	330K times
#88	102030	Instant	320K times
#89	987654321	Instant	310K times
#90	123abc	Instant	300K times
#91	football1	Instant	290K times
#92	password@1	Instant	280K times
#93	12345678a	Instant	270K times
#94	000000	Instant	260K times
#95	11111111	Instant	250K times
#96	qweasdzxc	Instant	240K times
#97	password1234	Instant	230K times
#98	letmein1	Instant	220K times
#99	welcome123	Instant	210K times
#100	zxcvbnm	Instant	200K times

Keyboard Walks

Patterns like `qwerty`, `asdfgh`, or `123456` are known as "keyboard walks". Hackers don't even need dictionary lists to crack these; their algorithms automatically try all adjacent keyboard key combinations first.

Personal Context

Using your pet's name, your birth year, or your favorite sports team (`yankees2024`) is extremely dangerous. Targeted attacks scrape your social media profiles to build custom dictionaries explicitly for you.

Suffix Padding

Taking a weak password and adding `!` or `123` to the end (`password123!`) does not make it strong. Cracking rigs automatically append common symbols and numbers to every dictionary word they try.

Ready to upgrade your security?

Our Password Generator runs entirely in your browser using cryptographically secure random number generation. It features a modern Passphrase Mode that generates mathematically unbreakable code phrases.

Go to Password Generator