Top 20 Passwords Leaked on Dark Web

Your go-to password may already be compromised

Note: We may earn a commission from products or services when you click on a link and make a purchase.

Cyber security firm Lookout has released its list of top twenty passwords found on the dark web. The record includes obvious mnemonics including numerical sequences like “123456” and basic words such as “DEFAULT.” These stolen credentials are often sold to other hackers on the dark web and used in future cyberattacks, scams, and phishing emails.

Using an easy-to-remember password is understandable. However, the repercussions can be huge. People often reuse the same password, repeatedly, across multiple online accounts. Although you may not be too concerned if a hacker compromises your Facebook, you may want to reconsider if your Facebook login is the same as your banking app.

READ Millions of Facebook User Records for Sale on Dark Web

According to Lookout, 281.5 million people were impacted by a data breach in 2021.

An estimated 80% of people have had their emails leaked online whether they realize it or not.

This means your private information like name, email, password, and possibly financial information could be out there on the dark web. Sometimes your private information may even be exposed on publicly accessible fileservers that require very little skill to access.

Risky Passwords – Reasons to be Concerned

The current Russian attack on Ukrainian, may take to cyberspace and result in an increase in cyberattacks across the globe. Banks and cryptocurrency wallets are likely targets along with critical infrastructure.

How Our Passwords Get Hacked

Hackers aren’t the only way our passwords and login credentials get compromised. Many of us share Netflix account logins, emails, and even laptops. Humans are not always clever when it comes to creating unique passwords.

READ Your Hacked Gmail Account is Worth $155 on the Dark Web

The average person has about 200 online accounts including credit cards, store loyalty programs, social media accounts, financial accounts, and work-related credentials. That makes creating and remembering a strong and unique password for each one of these accounts nearly impossible. A password app that can create and securely store passwords for you so they are accessible across all of your devices is one way to secure login credentials.

Using authenticator apps like Google authenticator and biometric logins for devices is another solid choice.

How Hacked Passwords are Exploited

When a hacker compromises a password, they use it to attack valuable accounts. If the hacker can break into an email account, they can use it to reset the password for any account that is connected to that email address.

Hackers can send tens of thousands of phishing emails quickly and at a low cost. it’s a numbers game. You may think that you don’t have enough cash in your bank account or a credit line limit that’s high enough to be of interest to a hacker. Think again. If they can trick a few thousand people out of $100 USD each with a cleverly designed email, the effort becomes worth it.

READ What is the Dark Web?

Some phishing emails are so well disguised it’s even difficult for a security professional to distinguish which ones are legitimate and which ones are a scam. Quality email filters and anti-malware apps help but they’re not foolproof. People can be defrauded through messaging apps like WhatsApp and social media sites like Facebook too.

Most Common Passwords 2021

Here is the list of the 20 passwords found on the dark web according to Lookout.

1. 123456

2. 123456789
3. Qwerty
4. Password
5. 12345
6. 12345678
7. 111111
8. 1234567
9. 123123
10. Qwerty123
11. 1q2w3e
12. 1234567890
13. DEFAULT
14. 0
15. Abc123
16. 654321
17. 123321
18. Qwertyuiop
19. Iloveyou
20. 666666