You probably know the feeling. You go to log on to a website, only to realize you forgot your password. Again.
You change it to something easy to remember this time. But what if it’s a phrase or series that is too simple? In other words, what if what you use is something that a bunch of other people are using as well, and now your accounts are easier to hack?
This is exactly why NordPass has reviewed password habits over the past six years. For 2025, they analyzed a 2.5TB database extracted from various publicly available sources, including those on the dark web. They looked at how people used passwords both at work and at home to identify the most commonly used passwords. They also determined the number of people who use those passwords and exactly how long it takes to hack, or in their words, the time to crack, those accounts. Pretty eye-opening, huh?
Here’s what they found at the top of their list for the passwords people used in their personal lives:
Now take a look to see what passwords people used at work:
Not a lot of differences between personal and work passwords, right? That makes the work of a hacker even easier.
Here’s the main takeaway for you: if you spot any of your passwords on this list, it’s time to up your password game. When resetting your passwords, go for a combination of letters (upper and lowercase), numbers, and characters. Here are some good guidelines.
We also recommend these steps:
Remembering passwords can be a pain. A reputable password manager like Keeper can help keep everything safe and organized. You can also look at passkeys to eliminate the need for passwords where it makes sense. If you need recommendations, we are here to help.
Enable multi-factor authentication to add an extra layer of security by requiring a second form of verification.
Once your new passwords are in place, remember to keep a close eye out for phishing attempts. Don’t let your hard work go to waste.
It’s also wise to check regularly to see if your passwords or accounts have been compromised. We suggest this free tool: haveibeenpwned.com.