Most common passwords

These are the passwords attackers try first. If yours is here, or looks like these, change it today.

Top 200 most common passwords

Ranked by frequency in the password list shipped with zxcvbn-ts, with profanity and explicit entries left out. Of these 200, 18 are digits only, 168 are shorter than 8 characters, and 7 are keyboard runs.

  1. 1123456
  2. 212345678
  3. 3qwerty
  4. 4123456789
  5. 512345
  6. 61234
  7. 7111111
  8. 81234567
  9. 9dragon
  10. 10123123
  11. 11baseball
  12. 12abc123
  13. 13football
  14. 14monkey
  15. 15letmein
  16. 16shadow
  17. 17master
  18. 18michael
  19. 19mustang
  20. 20666666
  21. 21qwertyuiop
  22. 22123321
  23. 231234567890
  24. 24superman
  25. 251qaz2wsx
  26. 267777777
  27. 27jordan
  28. 28qazwsx
  29. 29jennifer
  30. 30123qwe
  31. 31000000
  32. 32killer
  33. 33trustno1
  34. 34hunter
  35. 35harley
  36. 36zxcvbnm
  37. 37asdfgh
  38. 38buster
  39. 39andrew
  40. 40batman
  41. 41soccer
  42. 42tigger
  43. 43charlie
  44. 44robert
  45. 45sunshine
  46. 46thomas
  47. 47iloveyou
  48. 48ranger
  49. 49daniel
  50. 50hockey
  51. 51george
  52. 52computer
  53. 53michelle
  54. 54jessica
  55. 55starwars
  56. 56pepper
  57. 57klaster
  58. 58112233
  59. 59zxcvbn
  60. 60freedom
  61. 61princess
  62. 62joshua
  63. 63maggie
  64. 64ginger
  65. 6511111111
  66. 66131313
  67. 67amanda
  68. 68ashley
  69. 69love
  70. 70cheese
  71. 71159753
  72. 72nicole
  73. 73summer
  74. 74matthew
  75. 75chelsea
  76. 76dallas
  77. 77biteme
  78. 78matrix
  79. 79william
  80. 80yankees
  81. 81taylor
  82. 82corvette
  83. 83austin
  84. 84access
  85. 85martin
  86. 86heather
  87. 87thunder
  88. 88merlin
  89. 89secret
  90. 90diamond
  91. 91hello
  92. 92anthony
  93. 93hammer
  94. 941234qwer
  95. 95silver
  96. 96gfhjkm
  97. 97justin
  98. 98patrick
  99. 99richard
  100. 100bailey
  101. 101internet
  102. 102samantha
  103. 103golfer
  104. 104scooter
  105. 105test
  106. 106orange
  107. 107cookie
  108. 108q1w2e3r4t5
  109. 109maverick
  110. 110jackson
  111. 111sparky
  112. 112mickey
  113. 113phoenix
  114. 114bigdog
  115. 115snoopy
  116. 116guitar
  117. 117whatever
  118. 118chicken
  119. 119morgan
  120. 120andrea
  121. 121camaro
  122. 122mercedes
  123. 123peanut
  124. 124ferrari
  125. 125cowboy
  126. 126falcon
  127. 127welcome
  128. 128samsung
  129. 129steelers
  130. 130joseph
  131. 131smokey
  132. 132dakota
  133. 133melissa
  134. 134arsenal
  135. 135boomer
  136. 136eagles
  137. 137tigers
  138. 138marina
  139. 139nascar
  140. 140gateway
  141. 141porsche
  142. 142yellow
  143. 143monster
  144. 144spider
  145. 145diablo
  146. 146hannah
  147. 147bulldog
  148. 148junior
  149. 149london
  150. 150purple
  151. 151compaq
  152. 152lakers
  153. 153iceman
  154. 154qwer1234
  155. 155hardcore
  156. 156cowboys
  157. 157money
  158. 158banana
  159. 159ncc1701
  160. 160boston
  161. 161brandon
  162. 162tennis
  163. 163johnny
  164. 164miller
  165. 165q1w2e3r4
  166. 166coffee
  167. 167scooby
  168. 168123654
  169. 169edward
  170. 170nikita
  171. 171mother
  172. 172yamaha
  173. 173brandy
  174. 174barney
  175. 175chester
  176. 176oliver
  177. 177charles
  178. 178player
  179. 179knight
  180. 180forever
  181. 181steven
  182. 182rangers
  183. 183midnight
  184. 184chicago
  185. 185bigdaddy
  186. 186redsox
  187. 187victoria
  188. 188badboy
  189. 189angel
  190. 190please
  191. 191fender
  192. 192chris
  193. 193jasper
  194. 194james
  195. 195slayer
  196. 196rabbit
  197. 197natasha
  198. 198rachel
  199. 199marine
  200. 200wizard

The patterns behind the list

  • Number runs like 123456 and 111111: the shortest path through a keypad.
  • Keyboard walks like qwerty and 1qaz2wsx: they look random but follow the key layout.
  • Words and names like dragon, monkey, michael: in every cracking dictionary.
  • The word "password" itself, plus variants with digits or swaps.

Cracking tools combine lists like this with rules: capitalise the first letter, add a year, add !, swap a for @. So Dragon2024! is barely stronger than dragon. You can see the difference in the side-by-side comparison.

The fix is a password you didn't choose: a random one from the password generator saved in a password manager, or a diceware passphrase for the few you need to remember.

Common passwords FAQ

What is the most common password?

"123456" tops the frequency-ranked list used by the zxcvbn-ts strength estimator, followed by "password" and "12345678". The same handful lead almost every published analysis of leaked credentials, year after year.

What is the most hacked password?

The most common passwords are also the most hacked, because they are the first guesses in every attack. Have I Been Pwned’s Pwned Passwords service reports "123456" in breach data tens of millions of times. Check any password’s own count with our breach check.

Where does this list come from?

It is the top of the password frequency list bundled with zxcvbn-ts (the @zxcvbn-ts/language-common package), compiled from large public leaks, with profanity and sexually explicit entries removed for this page. Our strength checker uses the full list of about 49,000 entries to flag known passwords.

Why do people still use these passwords?

They are easy to type and remember, many sites once accepted them, and forced complexity rules push people to predictable variants like Password1!. NIST SP 800-63B now tells services to reject passwords found on lists like this one.

Is my password safe if it is not on this list?

Not necessarily. This page shows only the top 200. Attackers use lists with hundreds of millions of entries plus rules that add years, symbols and capitals. Test yours with the strength checker and breach check.