Here are the 200 most popular passwords in the world. 70% of them can be cracked in less than a second.

The NordPass company has published the results of its latest study, which lists the two hundred most popular passwords used in 2023 in selected 35 countries. This year, the company also checked for the first time what passwords internet users use when they use services provided online.

Here are the 200 most popular passwords in the world. 70% of them can be cracked in less than a second.
00:00 00:00

Summary

  • Researchers analyzed a 6.6 terabyte database of passwords revealed by malicious software to understand the password habits of internet users across various platforms.
  • Streaming platforms have the weakest passwords, while financial services platforms have the strongest.
  • Passwords often reference fiction, online games, or the user's location.
  • The most popular password globally is "12345", and 31% of the most popular passwords consist of similar numerical sequences.
  • The number of IP system break-ins is increasing annually, with users often sticking to pre-configured passwords.
  • 70% of the passwords on the global list can be cracked in less than a second.
  • Weak passwords on streaming services may be due to shared accounts and the use of easy-to-remember passwords.
  • There are high hopes for Passkey technology, a new form of authentication where the user's device generates a pair of related keys during registration, eliminating the need for the user to create a password.

In order to find out what passwords internet users use on various platforms, researchers analyzed a 6.6 terabyte database containing passwords revealed by various malicious software, which experts say poses a huge threat to users' cybersecurity. The scientists classified the data according to different industries, which allowed them to conduct a statistical analysis based on countries. NordPass received only statistical information from the researchers, which does not refer to the personal data of internet users.

It turns out that users use the weakest passwords to secure their accounts on streaming platforms. The strongest passwords are used to protect accounts on platforms with financial services. Passwords associated with fiction or online games are very popular. For example, the password "Aladdin66" was among the twenty most popular passwords in Taiwan, as was "Supermario12" in Austria. Words referring to the location of a given user also become passwords. Internet users often use the names of their countries or cities.

The most popular password in the world is, horrifyingly, the phrase "12345". As if that wasn't enough, nearly one third (31%) of the most popular passwords in the world this year consist of similar numerical sequences. The top ten most popular passwords are as follows:

  1. 123456
  2. admin
  3. 12345678
  4. 123456789
  5. 1234
  6. 12345
  7. password
  8. 123
  9. Aa123456
  10. 1234567890

It's no wonder, then, that the number of break-ins into IP systems is increasing every year. The worst part is that instead of improving old password creation habits, users have gone in a different direction and stick to pre-configured passwords. For example, the previously absent word "admin" has stormed onto this year's global list with great momentum and secured itself the second position.

In total, as much as 70% of the passwords on this year's global list can be cracked in less than a second.

Accounts on streaming services are protected by the weakest passwords. According to Tomas Smalakys, Director of Technology at NordPass, this may be related to shared accounts managed by several people, who for convenience use easy-to-remember passwords. No wonder, after all, people pay more attention to accounts that directly associate them with money.

As for the future of passwords, everyone has high hopes for Passkey technology. The essence of this new form of authentication is that the user does not have to invent a password - everything happens automatically. During registration on a website that supports the passkey method, the user's device generates a pair of related keys - public and private. The private key is stored on the device itself, while the public key is stored on the service's server. Without each other, they are useless. If the user is successfully identified based on biometric data, the keys will be matched and the user will successfully log in.