These Are the 25 Most Used Passwords of 2014, and We Have To Do Better

"iloveyou" is out, "batman" and "football" are in

(Photo via Ivan David Gomez Arce)

If you gauged our interest in data security and privacy as a nation by the amount of effort we put into creating secure passwords, you’d think we never kept valuable information on the Internet or do things like send naked pictures of ourselves with our phones.

Sign Up For Our Daily Newsletter

By clicking submit, you agree to our <a rel="nofollow noreferer" href="">terms of service</a> and acknowledge we may use your information to send you emails, product samples, and promotions on this website and other properties. You can opt out anytime.

See all of our newsletters

Data security firm Splashdata released their popular and cringeworthy annual list of most common Internet passwords this morning. The list was compiled from over 3.3 million passwords leaked in various security breaches and hacking scandals throughout the year. Topping the list are various variations on “123456” and, worst of all, “password.”

Here’s the full list of passwords, along with how their placement on the list changed as compared to last year:

  1. 123456 (Unchanged from 2013)
  2. password (Unchanged)
  3. 12345 (Up 17)
  4. 12345678 (Down 1)
  5. qwerty (Down 1)
  6. 1234567890 (Unchanged)
  7. 1234 (Up 9)
  8. baseball (New)
  9. dragon (New)
  10. football (New)
  11. 1234567 (Down 4)
  12. monkey (Up 5)
  13. letmein (Up 1)
  14. abc123 (Down 9)
  15. 111111 (Down 8)
  16. mustang (New)
  17. access (New)
  18. shadow (Unchanged)
  19. master (New)
  20. michael (New)
  21. superman (New)
  22. 696969 (New)
  23. 123123 (Down 12)
  24. batman (New)
  25. trustno1 (Down 1)

New on the list for 2014 are the bro-y and aspirational “batman,” “mustang,” “696969,” “dragon,” “football” and “superman.” And if you needed any hint as to how our secret, romantic lives are going as a nation, “iloveyou” has finally fallen off the list.

As for the unforgivable laziness of passwords like “abc123,” it’s likely that most people are privacy-illiterate enough not to know that many hackers, phishers and bots will simply run common passwords like this before trying more sophisticated methods.

President Obama is expected to scold and inspire us tonight about the importance of cybersecurity in his State of the Union address tonight. Hopefully he’ll get through to the laziest among us, because at this point, North Korean hackers and groups like Lizard Squad aren’t nearly as scary as the fact that many of us will simply give our passwords to Jimmy Kimmel if he asks nicely:


These Are the 25 Most Used Passwords of 2014, and We Have To Do Better