Top Bad WordPress Passwords Never Change – Updated for 2019

Why do I need another account? Another password? I’ll just use 123456 as usual. This account is not important.

As ridiculous as that seems it’s the way a lot of people think and the #1 reason they get hacked. We all hate passwords. They are not convenient. We have far too many and need to remember them all. However, things are getting out of control. Leaked passwords lists show that the situation is getting worse year by year. People are truly using 12345 more and more.

How can I check my WordPress passwords? Install Security Ninja, click “Scan Site,” and within a minute 50 security tests will be done, including password quality tests for all users on the site. It’s the easiest way to check your account and all others.

Check out our tips on how to log in securely to your WordPress website.

Things are getting worse

No amount of security experts, great software or any other protections will save you if you use one of the passwords listed below. In that case “hackers” will not hack into your account. They will simply log in after a few attempts.

Bad passwords are a problem for your website securityOur internal data collected from hacked sites that Security Ninja helped clean and data from other security resources show that bad passwords don’t change nor does their usage go down. The table below paints a bleak picture. Seven years of data show that people are stuck on 123456 and don’t intend to stop using it. 12345 is a bad password!

More and more applications are forcing people to use better passwords and don’t let them create an account until they enter a good password, but then people complain. Conversion rates go down, revenues follow, and the rules get removed. We don’t have a global solution to this problem, but we do have a solution for you. Stay away from any password that’s remotely similar to any one of the ones listed below!

Ignore all #wordpress security plugins, rules, and advice (if you must). But PLEASE use a semi-decent #password Click To Tweet

WordPress security is important, it’s not just your password that protects your website – check out our plugin to check your website for more than secure passwords.

Top 20 most frequently used bad passwords – updated for 2019

2018201720162015201420132012
#1123456123456123456123456123456123456password
#2passwordpasswordpasswordpasswordpasswordpassword123456
#3123456789123456781234512345678123451234567812345678
#412345678qwerty12345678qwerty12345678qwertyabc123
#51234512345football12345qwertyabc123qwerty
#6111111123456789qwerty1234567891234567890123456789monkey
#71234567letmein1234567890football1234111111letmein
#8sunshine123456712345671234baseball1234567dragon
#9qwertyfootballprincess1234567dragoniloveyou111111
#10iloveyouiloveyou1234baseballfootballadobe123baseball
#11princessadminloginwelcome1234567123123iloveyou
#12adminwelcomewelcome1234567890monkeyadmintrustno1
#13welcomemonkeysoloabc123letmein12345678901234567
#14666666loginabc123111111abc123letmeinsunshine
#15abc123abc123admin1qaz2wsx111111photoshopmaster
#16footballstarwars121212dragonmustang1234123123
#17123123123123flowermasteraccessmonkeywelcome
#18monkeydragonpasswordmonkeyshadowshadowshadow
#19654321passw0rddragonletmeinmastersunshineashley
#20charliemastersunshineloginmichael12345football

Please STOP using terrible passwords!

We know you won’t use a 20 characters long password with lowercase letters, uppercase letters, numbers and special characters (although you should). However, there’s a huge difference between “overkill” and using 123456. Please, come up with something that’s at least eight characters long, is specific to you, but isn’t your name.

Add a few numbers and at least one special character in the middle. That’s already miles better than 95% of people use. If you continue to use, princess doesn’t complain that people are hacking into your site because they’re not. They’re simply logging in.

Install Security Ninja to check all account passwords on your site in less than a minute. Security Ninja will perform 50 security tests including password quality tests for all users.

Join our email list

Newsletter about WordPress and internet security

Leave a Comment

Your email address will not be published. Required fields are marked *

Protect your WordPress website from hackers Get Security Ninja Pro

Security Ninja protects your website from attacks and keeps a constant eye on your website.

  • Firewall - Block suspicious visitors
  • Cloud Firewall - Ban 600+ million bad IPs from visiting
  • Autofix - Handle complicated security issues with one click.
  • Malware scanner finds malicious code on your website
  • Plugin integrity checker verifies your installed plugins
  • Scans your core WordPress files for changes
  • Automated scans - Warns you if there is trouble
  • Events Logger - Know everything that's going on your site.

 Secure payment
 Instant download & activation
 100% Money-Back Guarantee

Keep your website safe & prevent downtime due to security issues.

Black Friday - save 50% on annual and lifetime

20% OFF

Subscribe to our newsletter

* We do not spam or share your email

On any WP Security Ninja plan

and get

Hi and welcome back :-)