The 2025 list of most common passwords has been revealed by cybersecurity firm Comparitech, showing a persistent reliance on weak numeric and easily guessable passwords like "123456" and "admin." The alarming trend underscores urgent cybersecurity risks amid ongoing massive data breaches globally.
In a comprehensive report analyzing over 2 billion leaked passwords from 2025, Comparitech unveiled the top 10 most commonly used passwords worldwide. Once again, simplistic numeric sequences and default terms dominate the list, making accounts highly vulnerable to hackers. Passwords like "123456," "12345678," and "admin" persist at the top, revealing a widespread lack of strong password hygiene despite growing awareness around cybersecurity.
Notably, roughly 39% of the top 1000 passwords contain the "123" sequence, while one-quarter are exclusively numeric. Even strings like "abc" appear in 3.1% of popular passwords, illustrating predictable patterns that cybercriminals exploit extensively.
The report comes amid alarming figures — a recent breach compromised 1.3 billion unique passwords, intensifying the need for users to improve and diversify their credentials. Tech giants Google and Microsoft are aggressively promoting passwordless logins and passkeys to reduce dependency on traditional passwords.
Experts urge users to immediately change any passwords on this list and adopt multi-factor authentication and passkey solutions to safeguard personal and professional data.
Key Highlights:
"123456" tops the 2025 most common passwords list, followed by "12345678," "123456789," "admin," and "1234."
Over 2 billion leaked passwords analyzed to compile this data.
One-quarter of the top 1,000 passwords are purely numeric; nearly 39% contain "123."
Passwords remain highly predictable, exposing millions to easy breaches.
Google and Microsoft leading push towards passwordless authentication.
Users advised to update weak passwords and use multi-factor authentication immediately.
Recent breaches involved 1.3 billion unique password compromises, highlighting urgent risks.
Sources: Comparitech, Forbes, Inshorts, NDTV Sports Cybersecurity Desk