19 billion compromised passwords: More than 19 billion passwords leaked online: Here are the most common |

A new study by Cybernews has shown that 94% of the exposed passwords from the latest data injuries are reused or duplicated, which causes concerns about account safety. The study analyzed more than 19 billion passwords that were leaked between April 2024 and early 2025. According to the researchers, simple sequences such as “123456” remain the most Common passwords. Names like “Ana” were also used frequently. Only 6% of the passwords analyzed were unique. Profane words, food names, popular brands and city names were often used in passwords.
The results are based on data recorded by around 200 cyber security incidents, including violations with snowflake and Sokadar.io. The trimmed data with a total of over 3 TB contained passwords, e -mail addresses and other personal information.

List of the most common passwords

According to Cybernews studyWere among the most common passwords:
1234 – is used in almost 4% of all passwords (~ 727 million passwords)
123456 – Used in about 338 million passwords
Password – around 56 million passwords
Admin – around 53 million passwords
Pass – (together in “password” and other variations)
Ana – contained in almost 1% of all passwords (approx. 178.8 million), often as part of the other words like “banana”
Love – 87 million times
Sun – 34 million times
Dream – 6.1 million times
Joy – 6.9 million times
Freedom – 2 million times
Mario – 9.6 million times
Joker – 3.1 million times
Batman – 3.9 million times
Thor – 6.2 million times
Elsa – 2.9 million times
Ass – 165 million times (often part of “pass” or “password”))
Fuck – 16 million times
Shit – 6.5 million times
Tail – 3.2 million times
Slut – 3.2 million times

There were also frequent phenomena of:

Tea – 36 million times
Apple – 10.7 million times
Rice – 4.9 million times
Orange – 3.6 million times
Pizza – 3.3 million times
Lion – 9.8 million times
Fuchs – 7.8 million times
Rome – 13 million times
May – 28 million times
April – 5.2 million times
Google – 25.9 million times
Facebook – 18.7 million times
Kia – 12.7 million times

Weak passwords increase security risks

Cybernews reported that most users prefer passwords between 8 and 10 characters, whereby 27% only use small letters and numbers. The researchers warned that the repeated use of weak passwords increases the risk of cyber attacks.
In the study, a small improvement was also found in Password complexity. In 2022, only 1% of the passwords contained a mixture of capital letters, small letters, numbers and symbols. This number has now risen to 19%, which indicates an improvement that is due to stricter platform requirements.
The study was recommended to use longer passwords and activated Two-factor authentication Whenever possible.