Worst passwords of 2013 – our annual list updated

“Password” unseated by “123456” on SplashData’s annual “Worst Passwords” list

The 2013 list of worst passwords, influenced by postings from the Adobe breach, demonstrates the importance of not basing passwords on the application or website being accessed
LOS GATOS, CA – SplashData has announced its annual list of the 25 most common passwords found on the Internet. For the first time since SplashData began compiling its annual list, “password” has lost its title as the most common and therefore Worst Password, and two-time runner-up “123456” took the dubious honor. “Password” fell to #2.
According to SplashData, this year’s list was influenced by the large number of passwords from Adobe users posted online by security consulting firm Stricture Consulting Group following Adobe’s well publicized security breach.
“Seeing passwords like ‘adobe123’ and ‘photoshop’ on this list offers a good reminder not to base your password on the name of the website or application you are accessing,” says Morgan Slain, CEO of SplashData.
SplashData’s list of frequently used passwords shows that many people continue to put themselves at risk by using weak, easily guessable passwords. Some other passwords in the Top Ten include “qwerty,” “abc123,” “111111,” and “iloveyou.”
“Another interesting aspect of this year’s list is that more short numerical passwords showed up even though websites are starting to enforce stronger password policies,” Slain said. For example, new to this year’s list are simple and easily guessable passwords like “1234” at #16, “12345” at #20, and “000000” at #25.
SplashData, provider of the SplashID Safe line of password management applications, releases its annual list in an effort to encourage the adoption of stronger passwords. “As always, we hope that with more publicity about how risky it is to use weak passwords, more people will start taking simple steps to protect themselves by using stronger passwords and using different passwords for different websites.”
Presenting SplashData’s “Worst Passwords of 2013”:
Rank
Password
Change from 2012
1
123456
Up 1
2
password
Down 1
3
12345678
Unchanged
4
qwerty
Up 1
5
abc123
Down 1
6
123456789
New
7
111111
Up 2
8
1234567
Up 5
9
iloveyou
Up 2
10
adobe123
New
11
123123
Up 5
12
admin
New
13
1234567890
New
14
letmein
Down 7
15
photoshop
New
16
1234
New
17
monkey
Down 11
18
shadow
Unchanged
19
sunshine
Down 5
20
12345
New
21
password1
Up 4
22
princess
New
23
azerty
New
24
trustno1
Down 12
25
000000
New
SplashData’s top 25 list was compiled from files containing millions of stolen passwords posted online during the previous year. The company advises consumers or businesses using any of the passwords on the list to change them immediately.
SplashData suggests making passwords more secure with these tips:
  • Use passwords of eight characters or more with mixed types of characters. But even passwords with common substitutions like “dr4mat1c” can be vulnerable to attackers’ increasingly sophisticated technology, and random combinations like “j%7K&yPx$” can be difficult to remember. One way to create more secure passwords that are easy to recall is to use passphrases — short words with spaces or other characters separating them. It’s best to use random words rather than common phrases. For example, “cakes years birthday” or “smiles_light_skip?”
  • Avoid using the same username/password combination for multiple websites.  Especially risky is using the same password for entertainment sites that you do for online email, social networking, or financial service sites. Use different passwords for each new website or service you sign up for.
Having trouble remembering all those different strong passwords? Try using a password manager application that organizes and protects passwords and can automatically log you into websites. There are numerous applications available, but choose one with a strong track record of reliability and security like SplashID Safe, which has a 10 year history and over 1 million users. SplashID Safe has versions available for Windows and Mac as well as smartphones and tablet devices.
Facebook Comments
Worst passwords of 2013 – our annual list updated
Tagged on:

37 thoughts on “Worst passwords of 2013 – our annual list updated

  • January 20, 2014 at 2:15 pm
    Permalink

    12 and 19 are both 'sunshine'

    Reply
  • January 20, 2014 at 5:25 pm
    Permalink

    Sunshine is on there twice? 29235

    Reply
  • January 20, 2014 at 6:49 pm
    Permalink

    sunshine appears 2x. Bah.

    Reply
  • January 20, 2014 at 7:45 pm
    Permalink

    The password "sunshine" appears twice in the list. What should be there.

    Otherwise, great list!

    Reply
    • September 8, 2015 at 11:19 pm
      Permalink

      Good catch! This was fixed in press release but we missed it here. #12 is supposed to be “admin”.

      Reply
  • January 20, 2014 at 9:35 pm
    Permalink

    I would think the smaller passwords have to do with the Balence of User friendly and Security, I have noticed more and more mobile versions of the sites allow shorter passwords as it's "Easier" to type a 4 letter password on a mobile with a touch screen, some major sites have started allowing shorter passwords, stupid move in my opinion,

    Reply
  • January 20, 2014 at 10:40 pm
    Permalink

    12 sunshine Up 2

    19 sunshine Down 5

    Hummm!

    Reply
  • January 21, 2014 at 2:00 am
    Permalink

    12 and 19 = sunshine

    Reply
  • January 21, 2014 at 8:15 am
    Permalink

    wondering about #12 & #19-doing the math this should be #14 rather than 12 & 19. stretching to get 25 PW's?

    Reply
    • September 8, 2015 at 11:16 pm
      Permalink

      Good catch! This was fixed in press release but we missed it here. #12 is supposed to be “admin”.

      Reply
  • January 21, 2014 at 12:39 pm
    Permalink

    "azerty" = French keyboard on the rise

    Reply
  • January 21, 2014 at 1:25 pm
    Permalink

    Slight issue with sunshine appearing in positions 12 & 19? Or is there a space at the end of one of them 🙂

    Reply
    • September 8, 2015 at 11:15 pm
      Permalink

      Good catch, thanks! This was fixed in press release but we missed it here. Fixed here now.

      Reply
  • January 21, 2014 at 4:12 pm
    Permalink

    Wow, "sunshine" is so common that it's on there twice!

    Reply
    • September 8, 2015 at 11:15 pm
      Permalink

      Good catch, thanks! This was fixed in press release but we missed it here. Fixed here now.

      Reply
  • January 21, 2014 at 5:44 pm
    Permalink

    Why is "sunshine" listed at #19 and at #12?

    Reply
  • January 21, 2014 at 8:30 pm
    Permalink

    Very interesting, but …… What's the percentage distribution of the top passwords?

    Reply
  • January 22, 2014 at 11:37 am
    Permalink

    Seems #12 should be 'admin'

    Reply
    • September 8, 2015 at 11:14 pm
      Permalink

      Good catch, thanks! This was fixed in press release but we missed it here. Fixed now.

      Reply
    • September 8, 2015 at 11:06 pm
      Permalink

      Good catch, thanks! This was fixed in press release but we missed it here. #12 should be “admin”.

      Also, thanks for quoting our list in your article.

      Reply
  • January 22, 2014 at 5:34 pm
    Permalink

    Sunshine is showing up twice on your list…

    Reply
  • January 22, 2014 at 6:55 pm
    Permalink

    Why is "sunshine" (#12 & #19) on the list twice?

    Reply
  • January 22, 2014 at 9:40 pm
    Permalink

    Why is "sunshine" on the list twice?

    Reply
    • September 8, 2015 at 11:14 pm
      Permalink

      Good catch, thanks! This was fixed in press release but we missed it here. #12 should be “admin”.

      Reply
  • January 23, 2014 at 5:46 pm
    Permalink

    How come sunshine is listed twice?

    Reply
    • September 8, 2015 at 11:14 pm
      Permalink

      Good catch, thanks! This was fixed in press release but we missed it here. #12 should be “admin”.

      Reply
  • January 24, 2014 at 10:50 pm
    Permalink

    sunshine is there twice, listed as having moved up and down. What's up with that?

    Reply
    • September 8, 2015 at 11:05 pm
      Permalink

      Good catch, thanks! This was fixed in press release but we missed it here. #12 should be “admin”.

      Reply
  • January 25, 2014 at 6:24 pm
    Permalink

    "sunshine" both at 12th and 19th position? WTF? 😀

    Reply
    • September 8, 2015 at 11:13 pm
      Permalink

      Good catch, thanks! This was fixed in press release but we missed it here. #12 should be “admin”.

      Reply
    • September 8, 2015 at 11:05 pm
      Permalink

      Good catch, thanks! This was fixed in press release but we missed it here. #12 should be “admin”.

      Reply
  • March 31, 2014 at 7:16 pm
    Permalink

    Why does "sunshine" appear twice in the list? This doesn't make sense if it is a ranked list.

    Reply
    • September 8, 2015 at 11:05 pm
      Permalink

      Good catch, thanks! This was fixed in press release but we missed it here. #12 should be “admin”.

      Reply
  • April 11, 2014 at 5:36 pm
    Permalink

    How is sunshine #12 and #19???

    Reply

Leave a Reply

Your email address will not be published. Required fields are marked *