By

Chenda Ngak /

CBS News/ October 24, 2012, 2:14 PM

The 25 most common passwords of 2012

Do you think your password is secure? Try comparing it with the 25 most common passwords of 2012.

According password management company SplashData, the top three passwords of the year are "password," "123456," and "12345678." The company's list of the "25 worst passwords of the year" was compiled using data that hackers have posted online, which are said to be stolen passwords.

"Even though each year hacking tools get more sophisticated, thieves still tend to prefer easy targets," SplashData chief executive officer Morgan Slain said in a press release. "Just a little bit more effort in choosing better passwords will go a long way toward making you safer online."

How can consumer protect themselves? SplashData suggests these tips for making more secure passwords:

  • Use passwords of eight characters or more with mixed types of characters. One way to create longer, more secure passwords that are easy to remember is to use short words with spaces or other characters separating them. For example, "eat cake at 8!" or "car_park_city?"
  • Avoid using the same username/password combination for multiple websites. Especially risky is using the same password for entertainment sites that you do for online email, social networking, and financial services. Use different passwords for each new website or service you sign up for.
  • Having trouble remembering all those different passwords? Try using a password manager application that organizes and protects passwords and can automatically log you into websites. There are numerous applications available, but choose one with a strong track record of reliability and security like SplashID Safe, which has a 10 year history and over 1 million users. SplashID Safe has versions available for Windows and Mac as well as smartphones and tablet devices.

Here are the 25 most common passwords of 2012, along with the change in rank from last year.

1. password (Unchanged)

2, 123456 (Unchanged)

3. 12345678 (Unchanged)

4. abc123 (Up 1)

5. qwerty (Down 1)

6. monkey (Unchanged)

7. letmein (Up 1)

8. dragon (Up 2)

9. 111111 (Up 3)

10. baseball (Up 1)

11. iloveyou (Up 2)

12. trustno1 (Down 3)

13. 1234567 (Down 6)

14. sunshine (Up 1)

15. master (Down 1)

16. 123123 (Up 4)

17. welcome (New)

18. shadow (Up 1)

19. ashley (Down 3)

20. football (Up 5)

21. jesus (New)

22. michael (Up 2)

23. ninja (New)

24. mustang (New)

25. password1 (New)

© 2012 CBS Interactive Inc. All Rights Reserved.
17 Comments Add a Comment
linkicon reporticon emailicon
FallenAnjel says:
My password is CPE1704TKS ;)
reply
linkicon reporticon emailicon
The5dKeeper says:
It is important to reduce exposure by using separate, random character passwords for each account. This way if one account is compromised it will not spread to other accounts.

The best way to keep track of your passwords is with a Password Book. All software solutions have the same flaws, they are themselves the target of hackers. A Password Book - CAN NOT be hacked.

But it can be stolen. So you should use an encrypted password book like the 5th Dimension Password Keeper. It is the only secure password book on the market. You can find it at The5dKeeper or on Amazon.
reply
linkicon reporticon emailicon
PilotNick says:
If you can remember your password it is probably no good as a password. Try to avoid using recognisable words as these are easy for the the hackers to break. The only solution is to use a password manager to create and store strong passwords. I like the new web based password manager from www.Kemesa.com. It is easy to use and allows you to create a virtual email address to pair up with a strong password. Nobody it getting hold of my data!
reply
linkicon reporticon emailicon
AntonPictures says:
about Obama Romney and Jesus my passions just hit http://www.youtube.com/watch?v=Hctv0cKGKn0
10:01 PM
is going up now
reply
linkicon reporticon emailicon
kmlkrazy says:
I just downloaded the older version of SplashID and there was a virus attached!
reply
linkicon reporticon emailicon
Jillian2 says:
I use the simplest password that I can remember. I use that password for all my log ins and I will not change it , regardless of what the so called security experts say. i take all with 2 grains of salt. An as long as I throw one grain of that salt over my shoulder , I am safe from hackers. So y'all just take what i say with a grain of salt or two.
reply
canislupus16 replies:
linkicon reporticon emailicon
okey-dockey
linkicon reporticon emailicon
cloud_surfer says:
I don't know what type of wake-up call people need to kick this complacent attitude to authentication and passwords. There continues to remain the need for more preventative measures put in place. For example many of the leading companies in their respective verticals are giving users the perfect balance between security and user experience by implementing 2FA which allows us to telesign into our accounts. I know some will claim this make things more complicated, but the slight inconvenience each time you log in is worth the confidence of knowing your info is secure. I'm hoping that more companies start to offer this awesome functionality. This should be a prerequisite to any system that wants to promote itself as being secure. But almost everything is still only password protected. The fact is passwords (strong or not) do not replace the need for other effective security control.
reply
linkicon reporticon emailicon
ComputerPhil says:
I second the RoboForm suggestion. RoboForm lets you create different passwords and can even generate statistically strong passwords for you and them store/encrypt them with one common "master password". All you need is the master password and RoboForm replays any login credentials that you save onto the correct site. With RoboForm Everywhere I can now access my saved passwords from my phone, tablet, and work computers as well. I highly recommend RoboForm.
reply
linkicon reporticon emailicon
yunolikeme says:
Internet users need to learn better habits and strategies in this area. I use a password manager to create the strongest passwords possible and keep organized. The one I use (www.kemesa.com) also allows me to access and use unique virtual email addresses so I can still receive messages without sharing my real, personal email address. Little bit of an adjustment to my old ways, but so far so good.
reply
linkicon reporticon emailicon
JaggidEdje says:
Thanks alot CBS!! Now everyone knows my password and I have to change it! >.<
reply
See all 17 Comments