The 100 worst passwords of 2018 revealed

'123456' and 'password' are still top of the list, but new entries like 'donald' suggest we're still not cyber secure

The weakest link in cybersecurity is still humans, it would seem, as the annual list of 100 worst passwords has highlighted just how complacent some of us are.

Compiled by software company SplashData, the list is based on 5 million leaked passwords from various data sources around the internet. Predictably, the worst offender for the fifth year running, appearing the most on leaked datasets, was '123456'.

Unfortunately, 'password' came in 2nd, with variations of it like 'pasw0rd' and 'password1' all making the top 30.

From 100 to one there are different variations and expansions of the number one password, such as '123123', '654321', '123456789', and other simple number strings that follow familiar patterns. There's also a running theme throughout that suggests a rather lazy approach to cybersecurity, with many passwords consisting of just one digit used repeatedly, like '111111' and the rather devilish '666666'.

'Football' is still one of the most commonly used passwords on the internet, coming in at 16

A new entry for the year was 'donald', which has become so popular that it's the 23rd most frequently used password on the list. This was one of 11 new entries to make the top 25, all of which, like the rest of the list, fail to take into account basics. Users are regularly urged to use solid password should be unique, about eight to ten characters long and contain a mix of numbers and lower and upper case numbers.

As so many of these simple passwords are continuing to see use, Jake Moore, a cybersecurity expert at ESET, believes that websites could do more to help us.

"With over 925 million cyber-attacks in September 2018 alone, I think it's fair to say everyone needs to up their password game in 2019 and think more carefully about online security," he said.

"However, this needn't just be a dig at the account holders, websites need to ban simple and overused passwords. At the risk of upsetting convenience, being forced to use a complex password will help shed light on the subject and over time build confidence. Using a password manager is a great way to start and they will help out if you're ever stuck for thinking up a complex strong and unique password."

Featured Resources

Managing security risk and compliance in a challenging landscape

How key technology partners grow with your organisation

Download now

Evaluate your order-to-cash process

15 recommended metrics to benchmark your O2C operations

Download now

AI 360: Hold, fold, or double down?

How AI can benefit your business

Download now

Getting started with Azure Red Hat OpenShift

A developer’s guide to improving application building and deployment capabilities

Download now

Recommended

Best ransomware removal tools
ransomware

Best ransomware removal tools

22 Jan 2021
Hackers publish over 4,000 files stolen from SEPA in ransomware attack
Security

Hackers publish over 4,000 files stolen from SEPA in ransomware attack

22 Jan 2021
Weekly threat roundup: SAP, Windows 10, Chrome
vulnerability

Weekly threat roundup: SAP, Windows 10, Chrome

21 Jan 2021
Biden nominees highlight tough cyber security challenges
cyber security

Biden nominees highlight tough cyber security challenges

20 Jan 2021

Most Popular

School laptops sent by government arrive loaded with malware
malware

School laptops sent by government arrive loaded with malware

21 Jan 2021
How to move Windows 10 from your old hard drive to SSD
operating systems

How to move Windows 10 from your old hard drive to SSD

21 Jan 2021
What is the Raspberry Pi Pico?
Hardware

What is the Raspberry Pi Pico?

21 Jan 2021