SPYCLOUD RESEARCH

BAD PASSWORDS:
GOOD FOR CRIMINALS

Topical or pop culture-influenced passwords are far too easy to guess or crack – a field day for cybercriminals looking for easy entry points to perpetrate account takeover, online fraud and even ransomware.

Below is a monthly look at topical passwords and themes that are prevalent in our darknet data lake.

Is your password exposed?

Test any password to see how many times it has appeared on the darknet, meaning it’s unsafe to use.

Top 5 Topical Passwords You Should Retire Immediately
Password Basewords Total Count - Last 12 months
1 12345 163,804,914
2 taylor / swift / taylor swift / tswift / swiftie / era 20,693,892
3 apple / banana / orange / strawberry / fruit 3,003,124
4 amazon / prime 1,851,593
5 golf / pga / birdie / eagle / masters 1,441,116

Last updated: August 11, 2025

Blog: Password Authentication

Read our article Tips for Strong Passwords to learn how to avoid these easy password creation pitfalls and build better defense for your accounts and systems.

Top Pop Culture Inspired Compromised Passwords by Theme

Take a look at the latest stats for music, TV, politics and other themed passwords in our recaptured data. We share both the total counts in our entire data collection as well as a look at what we’ve recaptured from infostealer logs.

Password BasewordsTotal Count in Our Database – All TimeTotal Count – Last 12 MonthsMalware-Exfiltrated – All TimeMalware-Exfiltrated – Last 12 Months
taylor / swift / taylor swift / tswift / swiftie / era102,639,49020,693,8926,413,247922,983
sabrina carpenter / taste / manchild387,50561,07315,1481,991
bad bunny / dtmf / nuevayol / boricua685,18938,9387,893894
justin bieber / bieber / biebs / daisies / swag4,650,081624,640168,83419,205
chappell roan / chappell / pink pony club / pink pony76,1864,13273562
Password Basewords Total Count in Our Database – All Time Total Count – Last 12 Months Malware-Exfiltrated – All Time Malware-Exfiltrated – Last 12 Months
harry potter / hogwarts / hagrid / gryffindor 1,206,730 127,569 36,320 4,001
rupaul / werq / drag / shantay / sashay 25,619,843 3,001,690 830,145 92,200
love island / nicolandria / amaya papaya / casa amor 7,092 2,365 793 44
big brother / havenot / showmance / slop 704,654 137,767 38,952 4,972
jurassic / jurassic park / dino / dinosaur / velociraptor 5,596,711 988,559 289,304 37,886
superman / clark kent / lex luther 6,717,042 470,548 108,828 13,067
karate kid / karate / kung fu / legend 4,833,643 872,228 240,925 29,391
Password Basewords Total Count in Our Database – All Time Total Count – Last 12 Months Malware-Exfiltrated – All Time Malware-Exfiltrated – Last 12 Months
mario / super mario / mario bros / donkey kong 9,324,354 1,803,440 550,251 66,255
zelda / link / nintendo / ganondorf 22,116,084 3,003,414 774,273 99,008
pokemon / mega / lucario 21,425,641 3,468,173 1,000,636 116,956
minecraft / creeper / enderdragon / nether 4,957,988 1,525,516 389,012 44,405
Password Basewords Total Count in Our Database – All Time Total Count – Last 12 Months Malware-Exfiltrated – All Time Malware-Exfiltrated – Last 12 Months
tennis / wimbledon / sinner / gauff / deuce 3,506,619 223,729 42,508 3,982
formula 1 / mclaren / red bull / ferrari 4,150,494 434,009 135,288 11,278
mlb / baseball / ohtani / yankees / mets / dodgers 12,772,720 709,009 110,062 13,246
golf / pga / birdie / eagle / masters 14,511,721 1,441,116 371,597 44,042
Password Basewords Total Count in Our Database – All Time Total Count – Last 12 Months Malware-Exfiltrated – All Time Malware-Exfiltrated – Last 12 Months
tiktok 274,318 177,453 32,025 6,578
insta / instagram 2,046,427 1,218,437 211,267 31,594
facebook 4,765,008 2,318,174 250,876 29,523
xbox 3,125,308 497,425 150,070 17,237
twitter 797,177 534,833 91,529 10,625
spotify 501,158 363,897 82,055 12,798
reddit 106,395 68,901 13,577 1,433
amazon / prime 3,963,133 1,851,593 447,076 63,680
Password Basewords Total Count in Our Database – All Time Total Count – Last 12 Months Malware-Exfiltrated – All Time Malware-Exfiltrated – Last 12 Months
pizza / pizza lover / cheese / pepperoni 9,268,930 977,122 234,259 30,024
sweet tooth / cookie / candy / cake / pie 49,167,759 5,802,814 1,504,007 187,421
vegan / veggie / carrot / broccoli / pepper 6,689,247 436,125 88,898 10,005
apple / banana / orange / strawberry / fruit 27,447,370 3,003,124 754,205 98,533
ice cream / popsicle / sundae / gelato 2,046,131 139,578 26,723 2,896
Password Basewords Total Count in Our Database – All Time Total Count – Last 12 Months Malware-Exfiltrated – All Time Malware-Exfiltrated – Last 12 Months
trump / donald trump / president trump 817,606 88,650 21,823 2,373
democrat 54,040 4,728 1,081 56
republican 24,350 1,618 413 40
Password Basewords Total Count in Our Database – All Time Total Count – Last 12 Months Malware-Exfiltrated – All Time Malware-Exfiltrated – Last 12 Months
qwerty 120,727,564 8,425,762 1,875,866 222,230
admin 25,614,655 8,803,692 4,200,780 546,182
12345 1,006,048,836 163,804,914 51,149,537 7,731,443
hello 15,142,709 1,534,070 402,361 54,042
guest 1,427,866 270,093 89,228 11,636
Password Basewords Total Count in Our Database – All Time Total Count – Last 12 Months Malware-Exfiltrated – All Time Malware-Exfiltrated – Last 12 Months
comic-con / comiccon / cosplay / toucan / one piece / manga 3,412,478 795,119 264,671 35,784
summer / summertime / sun / sunny / pool / sunshine 66,174,043 8,974,616 2,732,169 346,796
june / july / august 33,770,504 2,146,830 524,877 65,035
school / college / university 7,934,994 1,124,777 283,846 38,764

Check Your Exposure

See your real-time darknet exposure details