Top 10 Most Common Leaked Passwords- The list of the most frequently used passwords on the internet this year has been leaked, and the results are both shocking and concerning. Despite repeated cybersecurity warnings, millions of users in 2025 relied on extremely weak passwords, with one-quarter of the top 1000 passwords consisting of numbers only.
According to a new report by Comparitech, an analysis of data from over two billion leaked user accounts this year yielded alarming results. For yet another year, the most common password was “123456”. The top three passwords—”123456,” “12345678,” and “123456789”—were used by millions of users. Other common passwords in the top 10 included “admin,” “password,” and “12345”.
Top 10 Most Common Leaked Passwords
The list of the most common leaked passwords is dominated by simple, sequential numbers:
- 123456
- 12345678
- 123456789
- admin
- 1234
- Aa123456
- 12345
- password
- 123
- 1234567890
Shocking Analysis Findings
The analysis of nearly 1,000 top passwords revealed several worrying trends:
- Heavy Reliance on Numbers: Approximately 25% of the top passwords used only numbers.
- The “123” Pattern: A significant 38.6% of passwords contained the sequence “123”.
- Lack of Creativity: Only 4% of users showed any creativity, using variations of the word “password”.
- Use of “admin”: The term “admin” appeared in 2.7% of the passwords.
- Other Common Words: The report also noted significant usage of “qwerty” and “welcome”.
Notable Mentions and Password Length
- The word “Minecraft” was used as a password 90,000 times, earning it a spot in the Top 100 list.
- The password “India@123” ranked 53rd on the list.
- Ignoring Expert Advice: Most cybersecurity experts recommend using passwords with at least 12 characters. However, the report found that a staggering 65.8% of the leaked passwords were shorter than 12 characters, making them significantly easier to crack.
The report serves as a critical reminder: if you recognize any of your passwords on this list, you should change them immediately to avoid potential security breaches.







