SplashData released a list of the top 100 most popular, and therefore dangerous, passwords used in 2017. Credit: Thinkstock After reviewing five million passwords leaked in 2017, SplashData has released a list of the most popular, and therefore dangerous, passwords currently being used. Usually, when we hear about the top, worst passwords, the list is for the previous year. Yet SplashData has released a list of the top 100 worst passwords of 2017 while we are still in 2017.As always, there have been some changes in what constitutes the worst-of-the-worst passwords as well as some of suckiest passwords still clinging to their original rank. For example, “123456” and “password” remain as the top two most popular passwords, but “starwars” is a newcomer to the list.“Unfortunately, while the newest episode may be a fantastic addition to the Star Wars franchise, ‘starwars’ is a dangerous password to use,” said Morgan Slain, CEO of SplashData, Inc. “Hackers are using common terms from pop culture and sports to break into accounts online because they know many people are using those easy-to-remember words.”Swapping the letter “o” with the number “0” may seem like a good idea to change up your password, but SplashData pointed out that trick isn’t so slick. On this year’s list, there are six variations of the top two worst passwords “123456” and “password” which replaced “o” with “0” or added extra digits to the numerical string. “Hackers know your tricks, and merely tweaking an easily guessable password does not make it secure,” Slain said.The password management company estimated that nearly “10% of people have used at least one of the 25 worst passwords on this year’s list, and nearly 3% of people have used the worst password, 123456.” “Football” is the only sport being used as a password in the top 10, but “hockey” comes in at 78 and “soccer” at 87 in the top 100 worst passwords of 2017 (pdf).Some people opt for a password which looks like nonsense, but actually follows a simple pattern on a keyboard. For example, “qazwsx” is a newcomer to the list of top 25 worst passwords.Other newcomers to the worst-of-the-worst include “letmein”, “monkey”, “hello”, “freedom”, “whatever” and “trustno1”.So, if one of your passwords is on this list, then way to go! You’ve joined the ranks of people using the worst and least secure passwords of 2017.SplashData’s top 25 worst passwords in 2017SplashData’s top 25 worst passwords in 20161) 1234561234562) passwordpassword3) 12345678123454) qwerty123456785) 12345football6) 123456789qwerty7) letmein12345678908) 123456712345679) footballprincess10) iloveyou123411) adminlogin12) welcomewelcome13) monkeysolo14) loginabc12315) abc123admin16) starwars12121217) 123123flower18) dragonpassw0rd19) passw0rddragon20) mastersunshine21) hellomaster22) freedomhottie23) whateverloveme24) qazwsxzaq1zaq125) trustno1password1 Related content news Dow Jones watchlist of high-risk businesses, people found on unsecured database A Dow Jones watchlist of 2.4 million at-risk businesses, politicians, and individuals was left unprotected on public cloud server. By Ms. Smith Feb 28, 2019 4 mins Data Breach Hacking Security news Ransomware attacks hit Florida ISP, Australian cardiology group Ransomware attacks might be on the decline, but that doesn't mean we don't have new victims. A Florida ISP and an Australian cardiology group were hit recently. By Ms. Smith Feb 27, 2019 4 mins Ransomware Security news Bare-metal cloud servers vulnerable to Cloudborne flaw Researchers warn that firmware backdoors planted on bare-metal cloud servers could later be exploited to brick a different customer’s server, to steal their data, or for ransomware attacks. By Ms. Smith Feb 26, 2019 3 mins Cloud Computing Security news Meet the man-in-the-room attack: Hackers can invisibly eavesdrop on Bigscreen VR users Flaws in Bigscreen could allow 'invisible Peeping Tom' hackers to eavesdrop on Bigscreen VR users, to discreetly deliver malware payloads, to completely control victims' computers and even to start a worm infection spreading through VR By Ms. Smith Feb 21, 2019 4 mins Hacking Vulnerabilities Security Podcasts Videos Resources Events SUBSCRIBE TO OUR NEWSLETTER From our editors straight to your inbox Get started by entering your email address below. Please enter a valid email address Subscribe