Revealed: The 10 most common and worst passwords of 2024
Let’s be honest: How many times have you used something like “123456” or “123123” as your password? With so many online accounts to juggle, it’s tempting to choose simple passwords, even though we know they’re weak. Unfortunately, a report from NordPass shows that we’re still making the same mistakes when it comes to keeping our accounts secure.
GET SECURITY ALERTS, EXPERT ADVICE – SUBSCRIBE TO KURT’S NEWSLETTER – CYBERGUY REPORT HERE
Facebook login page (Kurt “CyberGuy” Knutson)
The most common (and insecure) passwords of 2024
NordPass has released its set for the top 200 most popular passwords Used for personal and business purposes. In collaboration with threat management company NordStellar, NordPass analyzed a massive 2.5 terabyte database of global passwords, including those obtained from the dark web. Spoiler alert: They’re still shockingly unsafe.

Login page (Kurt “CyberGuy” Knutson)
Tired of getting mysterious password reset emails? Here’s what to do about it
Password hall of shame
We’ve all been guilty of using weak passwords at some point, but the extent of this digital negligence is truly astonishing. For the sixth year in a row, “123456” holds the dubious honor of being the most popular password used by over 3 million people.
It is closely followed by its more “complex” cousins: “123456789” and “12345678”. But wait, it gets worse. The password “password” still ranks high on the list, and is used by nearly 700,000 people. It’s as if we are collectively challenging hackers to break into our accounts.

Instagram login page (Kurt “CyberGuy” Knutson)
This intrusive malware is after your passwords and personal data
The 10 most common passwords
Here are the top 10 most common passwords of 2024, according to NordPass:
1) 123456
2) 123456789
3) 12345678
4) Password
5) QWERTY123
6) QWERTY1
7) 111111
8) 12345
9) Secret
10) 123123
Corporate negligence
You might think that in professional environments, where sensitive data is at stake, people would be more cautious. Think again. The corporate world alarmingly mirrors personal password habits. The same weak passwords dominate business accounts, with “123456” leading the pack, used in more than 1.2 million instances.

Login page (Kurt “CyberGuy” Knutson)
Critical errors in data brokers as millions are exposed to public passwords
Consequences of weak passwords
Using passwords that are easy to guess is like leaving your front door wide open in a neighborhood full of thieves. These passwords can be cracked in less than a second, potentially leading to account compromise. Identity theft And a host of other digital nightmares.

Login page (Kurt “CyberGuy” Knutson)
Strengthen your digital defenses
So, how can we break this vicious cycle of a bad password?
1) Going for a long time: Aim for passwords that are at least 20 characters long.
2) Mixing: Use a mix of upper and lower case letters, numbers, and special symbols.
3) Unique is the key: Never reuse passwords across multiple accounts.
4) Regular reviews: Evaluate and update your passwords periodically.
5) Consider using a password manager: The password manager will securely store and generate complex passwords. It will also help you create unique and hard-to-crack passwords that a hacker can never guess. Plus, it keeps track of all your passwords in one place and fills in the passwords for you when you log into the account so you never have to remember them yourself. The fewer passwords you remember, the less likely you are to reuse them for your accounts.
What qualities should I look for in a password manager?
When it comes to choosing the best password manager for you, here are some of my top tips:
- Publish He believes
- He works Smoothly Across all your devices
- creates Unique complex passwords Which varies for each account
- It is filled in automatically Login and password fields for apps and websites you visit again
- He has Browser extension All browsers you use automatically list passwords for you
- A. is allowed Fail-safe In case you lose or forget your primary password
- Verify that your current passwords remain secure and Alerts you If he is ever exposed
- Uses Two-factor authentication protection
Get more details about my country The best expert-reviewed password managers of 2024 are here.
6) Start using passkeys: Pass keys They are designed to replace traditional passwords and are gaining increasing traction, especially among larger companies and websites. More secure and reliable than traditional passwords, passkeys enable automatic login to websites and apps using facial recognition, fingerprint authentication, or a physical security key.
Subscribe to the KURT YouTube channel for quick video tips on how to do all your tech gadgets
Key takeaways for Kurt
Clearly, we need to step up our password game. Using weak passwords like “123456” is a gamble we can’t afford to take, especially with so much of our lives online. By taking simple steps, such as creating longer, more complex passwords and using a password manager, we can better protect ourselves from cyber threats. Let’s make 2025 the year we prioritize our digital security and leave old passwords behind.
What’s the worst password you’ve ever used, and has anything bad ever happened because of it? Let us know by writing to us at Cyberguy.com/Contact.
For more tech tips and security alerts, sign up for the free CyberGuy Report newsletter by heading to Cyberguy.com/Newsletter.
Ask Kurt a question or tell us what stories you’d like us to cover.
Follow Kurt on his social channels:
Answers to the most frequently asked questions about CyberGuy:
New from Kurt:
Copyright 2024 CyberGuy.com. All rights reserved.