Most Common Passwords in 2025: '123456' and 'India@123' Top the List Despite Security Risks

'123456' was utilized by more than 76 lakh individuals, according to the report.

Security experts consistently advise setting passwords that are difficult to guess and challenging to crack. However, a recent study reveals that the most frequently used passwords in 2025 include 'qwerty', '123456', 'admin', 'password', and 'India@123'.

Researchers at Comparitech examined over 2 billion compromised accounts whose passwords appeared on data breach forums in 2025.

The passwords 'Admin', 'Aa123456', '123', '1234567890', and 'password' top the list of most commonly used security credentials.

The report indicates that '123456' was employed by more than 76 lakh people. Meanwhile, 'admin' served as the password for over 19 lakh individuals.

Additionally, the researchers noted that 'India@123' ranked 53rd on the list of 100 most common passwords.

Here are the 10 most frequently used passwords:

123456

12345678

123456789

admin

1234

Aa123456

12345

password

123

1234567890

The report emphasized that human laziness has made password guessing "as easy as ABC and 123".

Curious about creating a strong password? Here are some simple techniques:

To ensure your online accounts remain secure, follow these basic steps. According to Microsoft, a password should contain at least 12 characters and incorporate a mixture of uppercase letters, lowercase letters, numbers, and symbols.

It is recommended to avoid using names of family members, persons, products, or characters as your password.

This report emerges shortly after the discovery that the Louvre Museum's core security system was protected by the easily guessable password "LOUVRE."

During its investigation into the October 19 heist, France's National Cybersecurity Agency (ANSSI) uncovered this vulnerability. The Rs 900-Crore robbery occurred in broad daylight when a four-person team, dressed in construction vests and motorcycle helmets, used a cherry picker to access the museum's Apollo Gallery.

According to Liberation, the agency had previously accessed the museum's video surveillance servers using the same basic password. This vulnerability was initially identified in a 2014 audit.

The agency warned at the time, "An attacker who manages to take control of it would be able to facilitate damage or even theft of artworks."