Security Awareness

Most Common Passwords used in the Whole Year: Report

Pawan Panwar
February 8, 2026

Featured preview

"123456," "admin," and "password" are the most popular passwords for 2025, per a recent Comparitech analysis.

For this analysis, Comparitech analysts gathered over 2 billion real account passwords that were revealed on data breach forums in 2025. Using that data, we compiled a list of the most widely used passwords.

The 10 most popular passwords are:

        123456

        12345678

        123456789

        admin

        1234

        Aa123456

        12345

        password

        123

        1234567890

The table below shows the frequency of each of the top 100 most popular passwords in our data collection.

Top 100 Most-Used Passwords in 2025 

Most Common Passwords used in the Whole Year Report (2)

 

Most Common Passwords used in the Whole Year Report (2)

 

Most_Common_Passwords_used_in_the_Whole_Year_Report_3_eo4y7e

 

You can click here to obtain this data in a PDF file

Guessing a password is as easy as ABC 123

Human indolence is demonstrated by the shocking number of passwords that are easily discovered using either ascending or descending digits.

        Only numbers made up 25% of the top 1,000 passwords.

        The string of numbers "123" was present in 38.6% of cases.  The descending numbers "321" made up another 2%.

        Similarly, the string of letters "abc" was present in 3.1%.

        A single character makes up a lot of popular passwords.  "********" is ranked #35 while “111111” is the 18th most utilized.

Common Words and Phrases

These digits and letters are often combined with similarly feeble terms like "admin," "password," and "qwerty."

        3.9% of the top 1,000 most popular passwords contained the words "pass" or "password" in one way or another.

        In 2.7% of cases, the phrase "admin" was used.

        In 1.6% of cases, the string "qwerty" was present.

        In 1%, the word "welcome" appeared.

With about 70,000 instances and an extra 20,000 instances with the variation casing "Minecraft," "minecraft" ranks as the 100th most common password in our data set.  The number "123456," however, happened 7.6 million times.

Ranking 53rd, "India@123" was a particularly well-liked but less common password.

Passwords by length

Most-used passwords by length

Most experts recommend creating a password with at least 12 characters. Extending a password significantly reduces the chance that it will be cracked.

        65.8% of the passwords we looked at had fewer than 12 characters.

        6.9% were composed of fewer than eight characters.

        3.2% used a minimum of 16 characters.

Only three numbers comprise the ninth most frequent password, "123," and only four numbers comprise the fifth, "1234."

Why does it matter?

Modern password-cracking tools can readily crack weak passwords.  Typical passwords are easy to decipher.  Short passwords are easy to brute-force.

Conversely, a strong password is unlikely to be broken.  Strong passwords are at least 12 characters long and include a combination of capital and lowercase letters, numbers, and symbols.  They ought to be random enough to be devoid of any discernible trends.  Create a new password or assess the strength of an existing one with our helpful tool.

However, the strength of your password is not the only factor.  Every password should be unique to avoid credential stuffing attacks.  Users should, whenever possible, implement two-factor authentication to avoid account takeovers even in the event that a password is compromised.

Modus Operandi

Craw Security's experts collected over 2 billion account credentials from Telegram and other data leak sites.  To obtain the most recent data possible, researchers either inquired about the age of the data when it was uploaded by the user or compared the data with breach notices filed by companies.  We only included the data that we are quite sure was corrupted in 2025.

Anomalies were removed from the data by cleaning, and any personally identifying information was removed through anonymization.

We ranked the most common passwords based on how often they appeared in the final data set.