As we edge closer to 2026, it’s startling to realize that ‘123456’ remains the most popular password choice for many people, highlighting a glaring vulnerability in our online security habits. This issue is not new, with ‘123456’ and ‘password’ consistently topping the charts of most commonly used passwords since 2020. Even pop culture-inspired choices like “Starwars” have been flagged as “dangerous” by SplashData as far back as 2017, underlining the enduring risk of predictable password selections.
The Enduring Popularity of ‘123456’
Despite the constant warnings and advice from cybersecurity experts, ‘123456’ continues to be the most common password as we approach 2026. This is not a recent trend, as ‘123456’ was found to be more popular than ever in 2020, according to an analysis of online password trends. The simplicity and sequential nature of this password make it extremely easy to crack, posing a significant risk to online security.
Recent reports from November 2025 confirm the enduring dominance of ‘123456’ among users, emphasizing the need for more robust password practices.
Common Passwords in Recent Lists
Assessments from 2020 revealed that ‘123456’ and ‘password’ were among the top 10 most commonly used passwords. These findings were not limited to a specific region or demographic but were observed across the United States. The widespread use of these weak passwords underscores the urgent need for better password education and awareness.
These findings were corroborated by a NordPass analysis in November 2020, which identified ‘123456’ and ‘password’ as leading weak choices among users.
Risks of Sequential and Simple Passwords
The vulnerability of ‘123456’ lies in its sequential nature, which makes it extremely easy to crack in online environments. This is not a new revelation, as insights from 2020 highlighted how such passwords contribute significantly to security breaches. The ease with which these passwords can be cracked poses a serious threat to personal and financial data.
As we move towards 2026, the risks associated with using such simple and predictable passwords remain as relevant as ever, emphasizing the need for users to adopt stronger, more secure passwords.
Dangerous Pop Culture-Inspired Choices
Pop culture-inspired passwords like “Starwars” are not only popular but also risky. SplashData has labeled “Starwars” as a “dangerous” password to use, due to its predictability and popularity among users. Despite warnings from experts, such thematic passwords continue to be widely used, often due to their ease of recall.
The risks associated with using “Starwars” as a password were highlighted in a December 2017 warning from Bitdefender. This serves as a stark reminder of the need to avoid predictable and easily guessable passwords.
Historical Trends in Password Weakness
The consistency of ‘123456’ appearing in common password lists across the years, from 2017 to 2025, is a testament to the persistent weakness in password choices among users. SplashData has been instrumental in identifying patterns like “Starwars” in their 2017 reports, highlighting the risks associated with such choices.
Data from 2020 showed no significant improvement in user habits, with ‘123456’ and ‘password’ still dominating the charts. This lack of progress underscores the need for more effective strategies to encourage the adoption of stronger passwords.
Implications for Modern Cybersecurity
The prevalence of ‘123456’ as a common password in 2025 signals broader challenges in password adoption as we approach 2026. The ease of cracking such passwords, as noted in the 2020 NordPass findings, remains a timeless concern for cybersecurity experts.
The cumulative evidence from sources spanning 2017 to 2025 paints a worrying picture of unchanged behaviors and persistent vulnerabilities. As we move forward, it’s clear that more needs to be done to educate users about the risks associated with weak passwords and to promote the adoption of stronger, more secure password practices.
More from MorningOverview