SPYCLOUD RESEARCH

BAD PASSWORDS:
GOOD FOR CRIMINALS

Topical or pop culture-influenced passwords are far too easy to guess or crack – a field day for cybercriminals looking for easy entry points to perpetrate account takeover, online fraud and even ransomware.

Below is a monthly look at topical passwords and themes that are prevalent in our darknet data lake.

Is your password exposed?

Test any password to see how many times it has appeared on the darknet, meaning it’s unsafe to use.

Top 5 Topical Passwords You Should Retire Immediately
Password Basewords Total Count - Last 12 months
1 college football / A&M / SEC / NCAA / NIL 7,888,192
2 amazon / prime 1,804,309
3 halloween / trick / treat / haunted / jackolantern 980,001
4 andor / cassian / rebel / star wars / empire 970,677
5 pumpkin / pumpkin pie / psl / latte 292,696

Last updated: October 13, 2025

Passwords, Passkeys, Cookies, MFA – Authentication Methods are Under Attack

Read our article Tips for Strong Passwords to learn how to avoid these easy password creation pitfalls and build better defense for your accounts and systems.

Top Pop Culture Inspired Compromised Passwords by Theme

Take a look at the latest stats for music, TV, politics and other themed passwords in our recaptured data. We share both the total counts in our entire data collection as well as a look at what we’ve recaptured from infostealer logs.

Password Basewords Total Count in Our Database – All Time Total Count – Last 12 Months Malware-Exfiltrated – All Time Malware-Exfiltrated – Last 12 Months
taylor swift / swift / tswift / swiftie / showgirl / opalite 845,853 113,305 49,374 6,650
sabrina carpenter / manchild / espresso 143,162 20,740 7,323 1,365
bad bunny / tití / boricua / super bowl 762,420 27,896 7,800 912
kendrick lamar / kendrick / boogie / kenfolk 1,316,513 63,154 19,393 2,487
Password BasewordsTotal Count in Our Database – All TimeTotal Count – Last 12 MonthsMalware-Exfiltrated – All TimeMalware-Exfiltrated – Last 12 Months
avatar / navi / neytiri / pandora5,629,543956,537350,91050,654
the pitt / pitt / noah wyle / doctor / nurse4,940,203405,453147,73021,069
severance / lumon / outie / innie / hellyr4,550,534335,089120,65218,419
andor / cassian / rebel / starwars / empire9,772,867970,677353,64145,456
wicked / elphaba / glinda / ariana4,602,454852,313306,62847,025
kpop / kpop demon hunters / huntrix312,11081,08028,7364,688
Password Basewords Total Count in Our Database – All Time Total Count – Last 12 Months Malware-Exfiltrated – All Time Malware-Exfiltrated – Last 12 Months
mario / super mario / mario bros / donkey kong 9,382,580 1,614,322 593,095 90,346
zelda / link / nintendo / ganondorf 22,188,303 2,571,124 820,303 110,867
pokemon / mega / lucario 21,519,831 2,991,311 1,061,065 141,253
minecraft / creeper / enderdragon / nether 4,993,373 1,411,502 415,342 57,902
Password Basewords Total Count in Our Database – All Time Total Count – Last 12 Months Malware-Exfiltrated – All Time Malware-Exfiltrated – Last 12 Months
football / nfl / ffl / yahoo / espn 29,783,762 2,013,014 637,836 96,795
college football / A&M / SEC / NCAA / NIL 49,688,210 7,888,192 2,762,216 415,498
caitlin clark / captain clark / wnba / fever 676,279 77,930 29,335 3,728
mlb / baseball / yankees / blue jays 10,714,247 300,009 63,873 7,650
Password Basewords Total Count in Our Database – All Time Total Count – Last 12 Months Malware-Exfiltrated – All Time Malware-Exfiltrated – Last 12 Months
tiktok 279,028 175,518 35,415 8,344
insta / instagram 2,066,740 1,200,894 223,896 35,239
facebook 4,789,318 2,261,209 267,300 36,655
xbox 3,137,967 432,237 159,224 20,204
twitter 803,368 529,440 95,828 11,709
spotify 506,910 358,879 86,122 13,029
reddit 107,383 68,303 14,235 1,656
amazon / prime 4,007,204 1,804,309 479,216 76,732
Password Basewords Total Count in Our Database – All Time Total Count – Last 12 Months Malware-Exfiltrated – All Time Malware-Exfiltrated – Last 12 Months
pumpkin / pumpkin pie / psl / latte 3,551,338 292,696 98,054 14,411
apple cider / mulled cider / cider 129,876 15,107 5,207 730
champagne / bubbly / cheers 563,335 24,130 7,700 1,128
turkey / stuffing / mashed potatoes / cranberry sauce 965,581 49,864 15,470 1,717
Password Basewords Total Count in Our Database – All Time Total Count – Last 12 Months Malware-Exfiltrated – All Time Malware-Exfiltrated – Last 12 Months
trump / donald trump / president trump 819,400 69,261 22,701 2,418
democrat 54,120 3,713 1,122 80
republican 24,384 1,149 427 51
Password Basewords Total Count in Our Database – All Time Total Count – Last 12 Months Malware-Exfiltrated – All Time Malware-Exfiltrated – Last 12 Months
qwerty 121,536,453 6,654,600 1,993,892 271,864
admin 26,042,026 8,835,522 4,568,312 741,918
12345 1,012,517,500 155,081,808 55,273,001 9,510,627
hello 15,193,420 1,263,632 431,809 67,649
guest 1,438,268 251,513 97,526 16,516
Password Basewords Total Count in Our Database – All Time Total Count – Last 12 Months Malware-Exfiltrated – All Time Malware-Exfiltrated – Last 12 Months
halloween / trick / treat / haunted / jackolantern 13,511,494 980,001 319,821 50,163
spooky / scary / frightening 1,007,364 68,868 23,190 3,471
ghost / ghoul / phantom / skeleton 5,343,286 757,146 277,500 40,716
witch / witchy / vampire / mummy 5,943,076 1,020,859 278,521 37,981
fall / autumn / leaves 7,273,694 645,642 228,004 33,262
thanksgiving / turkey / grateful / thanks 1,730,885 112,345 38,084 4,624
christmas / xmas / navidad 1,673,243 159,080 55,509 13,966
hannukkah / menorah 6,248 622 201 12
new year / new years eve / 2026 / nye / party 13,189,855 2,530,636 879,947 172,936

Check Your Exposure

See your real-time darknet exposure details

🪐 New research: The 2025 Identity Threat Report is here

X