The number sequence “123456” has overtaken “password” as the most common worst password among Internet users, an online security firm says.
Releasing its annual Worst Passwords list, SplashData said it was the first time “password” had lost its number-one position, changing places with its numerical rival.
In third place was “12345678,” unchanged from 2012, while “qwerty” and “abc123” came in fourth and fifth — and “iloveyou” climbed two spots to number nine.
Swinging the results, SplashData said, was a major security breach involving Adobe that laid bare the widespread use of weak passwords among users of such Adobe products as Photoshop.
“Seeing passwords like ‘adobe123’ and ‘photoshop’ on this list (for the first time) offers a good reminder not to base your password on the name of the website or application you are accessing,” said SplashData chief executive Morgan Slain, whose company markets password management apps.
Like other password experts, SplashData encouraged Internet users to opt for “passphrases” — a bunch of random words, numbers and characters, like “smiles_like_skip?” — that are easy to remember, but harder for online scam artists to crack.

More from AFP
- European Police Arrest 42 After Cracking Covert App
- Dutch, European Hospitals ‘Hit by Pro-Russian Hackers’
- Cyberattacks Target Websites of German Airports, Admin
- Meta Slapped With 5.5 Million Euro Fine for EU Data Breach
- International Arrests Over ‘Criminal’ Crypto Exchange
- France Regulator Raps Apple Over App Store Ads
- More Political Storms for TikTok After US Government Ban
- Meta Hit With 390 Million Euro Fine Over EU Data Breaches
Latest News
- Germany Appoints Central Bank IT Chief to Head Cybersecurity
- OpenSSL Ships Patch for High-Severity Flaws
- Software Supply Chain Security Firm Lineaje Raises $7 Million
- ICS Cybersecurity Firm Opscura Launches With $9.4 Million in Series A Funding
- Vulnerability Provided Access to Toyota Supplier Management Network
- Patch Released for Actively Exploited GoAnywhere MFT Zero-Day
- Linux Variant of Cl0p Ransomware Emerges
- VMware Says No Evidence of Zero-Day Exploitation in ESXiArgs Ransomware Attacks
