10 most common passwords to avoid in 2023

Bad password

Online authentication is still dominated by passwords, but passkeys could eventually replace them. However, it is important to note that there are good and bad passwords. Fortunately, companies like NordPass regularly release lists of commonly used passwords to help users avoid them. 

NordPass recently published a list of 200 common passwords, categorized by country or overall usage, along with the estimated time it takes hackers to crack them. Unsurprisingly, "password" topped the list, followed by "123456" and "123456789".

What's in the numbers? 

The NordPass team worked closely with cybersecurity experts to compile a list of the most dangerous passwords currently used worldwide. The analysis was based on a 3-terabyte database of passwords, and while some of the results may be surprising, it’s not unexpected which passwords are near the top of the list.

When compiling its research, NordPass looked at common passwords in 30 countries. and even broke them down by gender. 

The top 10 most common passwords worldwide are: 

  1. "password," guessed in less than one second, used by nearly 5 million people. 
  2. "123456," less than one second, 1.5 million
  3. "123456789," less than one second, 413,000+
  4. "guest," 10 seconds, 376,000+
  5. "qwerty," less than one second, 309,000+
  6. "12345678," less than one second, 284,000+
  7. "111111," less than one second, 229,000+
  8. "12345," less than one second, 188,000+
  9. "col123456," 11 seconds, 140,000+
  10. "123123," less than one second, 127,000+

Behind the passwords

According to NordPass, current events sometimes play a role in password generation. It notes, forever, that "tinder" is a very popular password on ... Tinder. Terms like "batman," "encanto," and were also used that represent two popular movies and a successful HBO TV series, respectively. 

Additionally, users often turn to other familiar topics to choose passwords. These include sports teams, food items, swear words, shopping brands, and video games. 

In the United States, "guest," ranked No.1, followed by "123456." In the United Kingdom, the top two reflected the world's top selections, "password," and "123456."

Naturally, some passwords on the top 200 lists are regional ones such as "liverpool,"  "amour," and "basketball," while still others are combinations of two bad passwords like "qwerty123," "123qwe," "password1," and "abcd1234."

Among the strangest common passwords that made the list are "killer," 

A good rule of thumb: if your password(s) are on the NordPass list, it's probably best to change it to lower your risk of problems. 

Selecting a better password

A lock sitting on top of a computer keyboard

(Image credit: Towfiqu barbhuiya on Unsplash)

Rather than using a common password, consider enlisting a password manager. These tools, many of which are free, have various benefits starting with adding convenience. Many popular password managers have the ability to automatically input your login credentials for websites and passwords. This feature saves you time and eliminates the inconvenience of logging in. 

Additionally, password managers are proficient at creating robust and unique passwords that are much harder for hackers to crack. With password managers being available on various platforms, you no longer need to remember or jot down your passwords.

Even if you choose not to use a password manager, NordPass offers suggestions for crafting them, including: 

  • Using the same password for multiple accounts can make it easier for hackers to gain access to all of your accounts. If even one account is compromised, all of your other accounts are put at risk. It’s important to use unique passwords for each account to increase security.
  • It’s important to periodically review your accounts and determine which ones you still actively use and which ones you no longer need. Neglected accounts can pose a security threat as you may not be aware if they are compromised.
  • It is important to consistently evaluate the strength of your passwords. Recognize any passwords that are weak, reused, or outdated, and enhance your online safety by creating new, intricate passwords. 

You might also be interested in the best internet security suites and the best secure browsers.

Bryan M Wolfe

Bryan M. Wolfe is a staff writer at TechRadar, iMore, and wherever Future can use him. Though his passion is Apple-based products, he doesn't have a problem using Windows and Android. Bryan's a single father of a 15-year-old daughter and a puppy, Isabelle. Thanks for reading!

Read more
password manager
I'm a security expert - here are my biggest tips for creating a secure password for work and home life to stay safe online
Cartoon Phishing
Over a billion credentials stolen were stolen in malware attacks in 2024
Hands typing on a keyboard surrounded by security icons
Best password generator of 2025
An abstract image of a lock against a digital background, denoting cybersecurity.
Best password manager of 2025
Person using finger print authentication
Passwords out, passkeys in: The future of secure authentication
Hand holding smartphone and scan fingerprint biometric identity for unlock her mobile phone
Passwordless authentication continues to grow, with biometrics helping push adoption
Latest in Security
Data Breach
Thousands of healthcare records exposed online, including private patient information
China
Juniper patches security flaws which could have let hackers take over your router
Representational image depecting cybersecurity protection
GitLab has patched a host of worrying security issues
Ai tech, businessman show virtual graphic Global Internet connect Chatgpt Chat with AI, Artificial Intelligence.
AI agents can be hijacked to write and send phishing attacks
China
Volt Typhoon threat group had access to American utility networks for the best part of a year
Abstract image of cyber security in action.
MassJacker malware targets those looking for pirated software
Latest in News
A super close up image of the Google Gemini app in the Play Store
It's official: Google Assistant will be retired for phones this year, with Gemini taking over
Quordle on a smartphone held in a hand
Quordle hints and answers for Sunday, March 16 (game #1147)
NYT Strands homescreen on a mobile phone screen, on a light blue background
NYT Strands hints and answers for Sunday, March 16 (game #378)
NYT Connections homescreen on a phone, on a purple background
NYT Connections hints and answers for Sunday, March 16 (game #644)
Three iPhone 16 handsets on show
Apple could launch an iPhone 17 Ultra this year – but we've heard these rumors before
Super Mario Odyssey
ChatGPT is the ultimate gaming tool - here's 4 ways you can use AI to help with your next playthrough