The top password—“123456”—was used over 3 million times in the dataset analyzed by NordPass. In fact, six of the top 10 passwords are purely numeric, highlighting how common predictable number patterns remain.

These types of passwords are among the easiest for hackers to guess using brute-force attacks, taking a matter of seconds.

Along with numbers, users often rely on keyboard sequences like “qwerty” or common words like “password” and “secret.” While these may be easy to remember, they’re also easy to hack. Variations like “Password” or “password1” offer little improvement in security.