Top 200
Most Common Passwords:
Generations change, password habits remain
Seven years since our first top 200 common passwords list, we’ve witnessed how credential trends have changed — and what has remained the same. Each year, we rediscover people’s tendency to opt for weak passwords that prioritize convenience over security.
However, this year, we decided to ask ourselves: How do different generations treat their password use? From the silent generation to the “zoomers,” we analyzed which passwords are the most common among different user groups. As it turns out, bad password habits are trendy no matter how old you are.
Research breakdown
Methodology
The Top 200 Most Common Passwords report is the result of a joint effort between NordPass and NordStellar, prepared in collaboration with independent researchers specializing in cybersecurity incidents. Recent public data breaches and dark web repositories were analyzed from September 2024 to September 2025 to identify statistically aggregated data. No personal data was acquired or purchased for this research.
Global insights
The data was carefully organized and categorized by the country of origin, allowing us to uncover specific regional password trends and vulnerabilities in 44 countries.
Generational analysis
This year’s research comes with a twist. We wanted to gain a better understanding of generational password habits, spanning from the silent generation to Generation Z. Passwords and their corresponding metadata, including dates of birth where applicable, were reviewed. This allowed us to assign passwords accurately to their respective age groups and provided us with relevant statistical data.
Cultural footprints: Common passwords by country
After years spent carefully examining exposed passwords, we have observed numerous variations made using a first name or a surname alongside some numbers — think “kristian123” or “Joan89.”
Although these cases rarely make it to the top global entries, we’ve noticed a clear pattern: In each country, the most common first names and surnames often appear in passwords, proving that geography and culture play a significant role in shaping common — yet vulnerable — security practices.
Findings
Make your passwords tough to break
Discover how NordPass can help you create strong and unique passwords on the spot to prevent unauthorized access to your personal accounts.
The myth of the “digital native”
We tend to assume that the younger generations online are digital natives — having grown up immersed in the online world, they possess an innate understanding of cybersecurity and its risks.
However, our research has debunked this misconception: In fact, the password habits of an 18-year-old are strikingly similar to those of an 80-year-old. Take a closer look at how common password vulnerabilities persist across five generations* of digital residents.
*Generations are classified as follows: Generation Z (1997-2007), millennials (1981-1996), Generation X (1965-1980), baby boomers (1946-1964), silent generation (born before 1946)
| Rank | Password |
|---|---|
| 1 | 12345 |
| 2 | 123456 |
| 3 | 12345678 |
| 4 | 123456789 |
| 5 | password |
| 6 | 1234567890 |
| 7 | skibidi |
| 8 | 1234567 |
| 9 | pakistan123 |
| 10 | assword |
Password trends in 2025: Key insights
“123456” holds its throne
It’s official: “123456” has once again claimed the controversial title of the world’s most common password — and one of the weakest. That marks six out of seven years this password has topped our chart, with “password” claiming the honor just once. The message is clear: Users favor simplicity, even at the cost of personal security.
Old habits for young generations
Much to our surprise, password quality is poor across all generations. Where we expected discerning differences, we actually faced a striking uniformity in vulnerabilities. “12345” and “123456” emerged as the top password choice in every age group, and other simple numeric sequences we saw in the global list, like “1234567” or “1234567890,” also ranked high.
Password hygiene awareness is still lacking
Despite significant efforts over the years to educate users about cybersecurity through awareness campaigns, our data shows little improvement in widespread password hygiene and security habits. With the number of breach cases growing each year, the problem remains as prevalent and dangerous as ever, suggesting that current approaches fail to drive meaningful change.
Numbers, countries, and hobbies: Password trends in 2025
From profanities and lucky numbers to replacing letters with special symbols: Take a closer look at the most common password trends among users worldwide.