Skip to content ↓ | Skip to navigation ↓

“123456” and “password” were the most-used and second most-used passwords of 2015, according to an annual worst passwords ranking.

Every year, SplashData, a developer of password management software, releases an annual list of the worst–in this case, most commonly used–passwords. It builds its ranking based on more than two million leaked passwords that once belonged to users located in North America and in Western Europe.

2015 marks the fifth year of the annual ranking.

Overall, little movement has occurred at the top of the list over the past five years. “123456” and “password” have claimed the top two positions since 2011. The other top combinations, such as “12345678,” “qwerty,” “12345,” and “123456789,” either experienced no change from last year or showed only slight movement up or down.

The bottom of the list is a different story. In the 2014 ranking, references to the DC universe, including “batman,” “superman,” and “shadow,” popped up at the list’s bottom. This year, the Force has supplanted superheroes, with “princess,” “solo,” and “starwars” ranking in at 21, 23, and 25, respectively.

You can view the complete 2015 ranking below:

1. 123456 No Change
2. password No Change
3. 12345678 Up 1
4. qwerty Up 1
5. 12345 Down 2
6. 123456789 No Change
7. football Up 3
8. 1234 Down 1
9. 1234567 Up 2
10. baseball Down 2
11. welcome New
12. 1234567890 New
13. abc123 Up 1
14. 111111 Up 1
15. 1qaz2wsx New
16. dragon Down 7
17. master Up 2
18. monkey Down 6
19. letmein Down 6
20. login New
21 princess New
22 qwertyuiop New
23 solo New
24 passw0rd New
25 starwars New

As always, for each online account, users are encouraged to build unique passwords that are at least 15 characters in length, that incorporate special characters, and that exclude personal information, such as first and last names.

For more information on password security best practices, please click here.