The 100 Worst Passwords
You Must Stop Using in 2026

Billions of leaked credentials are available on the dark web, and this figure is rising with each passing year. Despite all the warnings, people are still using very weak and predictable passwords. Are you using one of them?

Don't Wait Until It's Too Late.

The software of a hacker can crack an 8-character password in lowercase in literally 0.01 seconds. Create an unbreakable, secure password for free in an instant.

Generate a Secure Password

The Global Top 100 Worst Passwords

The following data represents a compilation of millions of publicly leaked databases from all over the world. If you use any of the passwords represented on this list, you have a compromised account.

Rank	Compromised Password	Time to Crack	Exposure Count
#1	123456	Instant	124.5M times
#2	password	Instant	87.1M times
#3	12345678	Instant	33.2M times
#4	qwerty	Instant	27.4M times
#5	123456789	Instant	23.8M times
#6	12345	Instant	19.9M times
#7	1234	Instant	15.2M times
#8	111111	Instant	14.0M times
#9	1234567	Instant	12.8M times
#10	dragon	Instant	9.4M times
#11	123123	Instant	9.0M times
#12	iloveyou	Instant	8.7M times
#13	admin	Instant	7.9M times
#14	monkey	Instant	6.5M times
#15	sunshine	Instant	5.2M times
#16	letmein	Instant	4.8M times
#17	abc123	Instant	4.4M times
#18	password123	Instant	4.1M times
#19	football	Instant	3.8M times
#20	princess	Instant	3.2M times
#21	1234567890	Instant	3.0M times
#22	Welcome	Instant	2.8M times
#23	welcome	Instant	2.7M times
#24	666666	Instant	2.5M times
#25	superman	Instant	2.4M times
#26	love	Instant	2.3M times
#27	qazwsx	Instant	2.2M times
#28	baseball	Instant	2.0M times
#29	ashley	Instant	1.9M times
#30	1234567890	Instant	1.8M times
#31	michael	Instant	1.7M times
#32	computer	Instant	1.6M times
#33	mustang	Instant	1.5M times
#34	jessica	Instant	1.4M times
#35	jordan	Instant	1.3M times
#36	qwertyuiop	Instant	1.2M times
#37	shadow	Instant	1.1M times
#38	batman	Instant	1.09M times
#39	joshua	Instant	1.07M times
#40	charlie	Instant	1.05M times
#41	daniel	Instant	1.03M times
#42	matthew	Instant	1.02M times
#43	master	Instant	990K times
#44	pokemon	Instant	960K times
#45	a1b2c3d4	Instant	950K times
#46	mypassword	Instant	920K times
#47	welcome1	Instant	890K times
#48	ninja	Instant	860K times
#49	112233	Instant	830K times
#50	naruto	Instant	810K times
#51	killer	Instant	790K times
#52	starwars	Instant	770K times
#53	hannah	Instant	760K times
#54	asdfgh	Instant	750K times
#55	secret	Instant	740K times
#56	andrew	Instant	720K times
#57	william	Instant	710K times
#58	amanda	Instant	690K times
#59	anthony	Instant	670K times
#60	justin	Instant	650K times
#61	sarah	Instant	640K times
#62	hunter	Instant	630K times
#63	thomas	Instant	610K times
#64	chris	Instant	590K times
#65	taylor	Instant	570K times
#66	cheese	Instant	560K times
#67	jennifer	Instant	550K times
#68	robert	Instant	540K times
#69	qwerty123	Instant	520K times
#70	david	Instant	510K times
#71	snoopy	Instant	500K times
#72	cookie	Instant	490K times
#73	peanut	Instant	480K times
#74	brandon	Instant	470K times
#75	whatever	Instant	450K times
#76	alexander	Instant	440K times
#77	summer	Instant	430K times
#78	spring	Instant	420K times
#79	winter	Instant	410K times
#80	autumn	Instant	400K times
#81	123321	Instant	390K times
#82	password!	Instant	380K times
#83	system	Instant	370K times
#84	qwerty1234	Instant	360K times
#85	123123123	Instant	350K times
#86	1q2w3e	Instant	340K times
#87	7777777	Instant	330K times
#88	102030	Instant	320K times
#89	987654321	Instant	310K times
#90	123abc	Instant	300K times
#91	football1	Instant	290K times
#92	password@1	Instant	280K times
#93	12345678a	Instant	270K times
#94	000000	Instant	260K times
#95	11111111	Instant	250K times
#96	qweasdzxc	Instant	240K times
#97	password1234	Instant	230K times
#98	letmein1	Instant	220K times
#99	welcome123	Instant	210K times
#100	zxcvbnm	Instant	200K times

Keyboard Walks

Patterns like "qwerty" or "123456" are the first things hackers test. They are virtually identical to having no password since they are top entries in every cracking dictionary.

Personal Context

Avoid using names, birthdays, or pets. Automated attacks scrape social media to build personal dictionaries for individual targets. A unique password is statistically safer.

Suffix Padding

Adding "!" or "123" to the end of "password" doesn't help. Modern systems automatically test these common variations on every word in the dictionary.

Ready to upgrade your security?

Our Password Generator is a browser-based application that utilizes the highest level of cryptographically secure random number generation available. It offers a state-of-the-art Passphrase Mode, which is mathematically unbreakable.

Go to Password Generator

The 100 Worst PasswordsYou Must Stop Using in 2026