Bad Passwords:
Good for Criminals
Topical or pop culture-influenced passwords are far too easy to guess or crack – a field day for cybercriminals looking for easy entry points to perpetrate account takeover, online fraud and even ransomware.
Every year, SpyCloud researchers analyze our billions of recaptured data assets looking for the most frequently reused passwords across third-party data breaches and malware victim logs as a key component of our Annual Identity Exposure Report. But we thought a more frequent look at popular password keywords was warranted. Here’s a look at topical passwords and themes that are prevalent in our database of darknet data.
Is your password exposed?
Test any password to see how many times it has appeared on the darknet, meaning it’s unsafe to use.
Top 5 Topical Passwords You Should Retire Immediately
| Password Basewords | Total Count - Last 12 months | |
|---|---|---|
| 1 | apple / banana / orange / strawberry / fruit | 2,258,478 |
| 2 | 4th of july / independence day / america | 373,178 |
| 3 | billie eilish / billie / hard and soft / lunch / chihiro | 288,169 |
| 4 | moana / maui / disney | 261,476 |
| 5 | swimming / diving / swimmer / diver | 182,618 |
Last updated: July 5, 2024
Read our article Tips for Strong Passwords to learn how to avoid these easy password creation pitfalls and build better defense for your accounts and systems.
Top Pop Culture Inspired Compromised Passwords by Theme
Take a look at the latest stats for music, TV, politics and other themed passwords in our recaptured data. We share both the total counts in our entire data collection as well as a look at what we’ve recaptured from infostealer logs.
- Music / Celebrity
| Password Basewords | Total Count in Our Database - All Time | Total Count - Last 12 Months | Malware-Exfiltrated - All Time | Malware-Exfiltrated - Last 12 Months |
|---|---|---|---|---|
| taylor / swift / tswift / swiftie / tortured poets / alchemy / erastour | 7,483,562 | 517,390 | 181,199 | 55,154 |
| billie eilish / billie / hard and soft / lunch / chihiro | 14,328,032 | 288,169 | 41,517 | 13,718 |
| chappellroan / pink pony club / good luck babe / hot to go | 4,024 | 249 | 146 | 25 |
| sabrina carpenter / espresso / please please please | 106,312 | 9,746 | 7,608 | 2,383 |
| morgan wallen / post malone / country | 1,701,614 | 85,651 | 29,998 | 10,048 |
- Politics / Global
| Password Basewords | Total Count in Our Database - All Time | Total Count - Last 12 Months | Malware-Exfiltrated - All Time | Malware-Exfiltrated - Last 12 Months |
|---|---|---|---|---|
| trump / donald trump / president trump | 846,623 | 71,441 | 41,549 | 12,616 |
| biden / president biden / joe biden | 73,212 | 6,666 | 6,538 | 2,563 |
| democrat | 54,520 | 3,004 | 1,911 | 450 |
| republican | 26,822 | 1,579 | 783 | 228 |
| 2024 election / election / uselection | 88,876 | 7,792 | 8,489 | 2,073 |
- Gaming
| Password Basewords | Total Count in Our Database - All Time | Total Count - Last 12 Months | Malware-Exfiltrated - All Time | Malware-Exfiltrated - Last 12 Months |
|---|---|---|---|---|
| prince of persia / lost crown / sargon / immortals | 92,893 | 8,989 | 7,481 | 2,273 |
| final fantasy / rebirth / planet / cloud strife / playstation | 2,858,459 | 272,474 | 227,059 | 75,547 |
| mario / super mario / mario bros / donkey kong | 8,606,084 | 979,503 | 797,310 | 297,333 |
| zelda / link / nintendo / ganondorf | 21,202,660 | 1,367,963 | 933,194 | 320,984 |
- TV / MOVIES
| Password Basewords | Total Count in Our Database - All Time | Total Count - Last 12 Months | Malware-Exfiltrated - All Time | Malware-Exfiltrated - Last 12 Months |
|---|---|---|---|---|
| deadpool / chimichanga / wolverine / marvel | 2,117,659 | 273,485 | 225,425 | 81,426 |
| moana / maui / disney | 2,687,189 | 261,476 | 130,473 | 52,575 |
| hit man / glen powell / twisters | 1,820,714 | 120,719 | 85,199 | 28,958 |
| inside out 2 / pixar | 43,081 | 4,559 | 4,601 | 1,373 |
- Sports
| Password Basewords | Total Count in Our Database - All Time | Total Count - Last 12 Months | Malware-Exfiltrated - All Time | Malware-Exfiltrated - Last 12 Months |
|---|---|---|---|---|
| olympics / paris olympics / torch / gold medal | 449,197 | 32,912 | 21,139 | 7,936 |
| swimming / diving / swimmer / diver | 2,580,742 | 182,618 | 66,251 | 19,844 |
| simone biles / gymnastics / gymnast | 656,949 | 59,458 | 5,380 | 1,528 |
| nba playoffs / celtics / pacers / mavericks / bonston | 767,511 | 47,677 | 10,779 | 3,311 |
- Tech / Other
| Password Basewords | Total Count in Our Database - All Time | Total Count - Last 12 Months | Malware-Exfiltrated - All Time | Malware-Exfiltrated - Last 12 Months |
|---|---|---|---|---|
| tiktok | 109,184 | 42,568 | 38,334 | 19,315 |
| insta / instagram | 968,453 | 228,345 | 259,088 | 95,259 |
| 2,807,388 | 395,807 | 359,662 | 130,344 | |
| xbox | 2,996,982 | 309,651 | 239,225 | 91,232 |
| twitter / elon | 8,193,773 | 821,213 | 666,503 | 241,449 |
| spotify | 171,873 | 84,612 | 107,648 | 41,533 |
| 50,009 | 15,108 | 19,505 | 5,852 |
- Holidays / Events
| Password Basewords | Total Count in Our Database - All Time | Total Count - Last 12 Months | Malware-Exfiltrated - All Time | Malware-Exfiltrated - Last 12 Months |
|---|---|---|---|---|
| 4th of july / independence day / america | 5,327,561 | 373,178 | 233,601 | 87,451 |
| father / fathers day / dad / daddy | 34,877,092 | 2,979,823 | 2,201,447 | 819,611 |
| summer / summertime / sun / sunny / pool / sunshine | 62,902,370 | 4,889,754 | 3,330,038 | 1,145,278 |
| 2024 / graduation / grads / congrats / commencement | 3,295,332 | 696,321 | 652,581 | 441,181 |
- Food
| Password Basewords | Total Count in Our Database - All Time | Total Count - Last 12 Months | Malware-Exfiltrated - All Time | Malware-Exfiltrated - Last 12 Months |
|---|---|---|---|---|
| pizza / pizza lover / cheese | 9,041,382 | 686,103 | 339,500 | 115,181 |
| sweet tooth / cookies / candy / cake / pie | 40,477,315 | 3,173,125 | 1,691,547 | 600,219 |
| vegan / veggies / carrot / broccoli / pepper | 6,845,871 | 442,508 | 144,099 | 46,835 |
| apple / banana / orange / strawberry / fruit | 27,738,170 | 2,258,478 | 1,330,437 | 465,318 |
| ice cream / popsicles / sundae | 1,900,276 | 125,169 | 34,781 | 11,477 |
Check Your Exposure
See your real-time darknet exposure details. Just enter your email and we’ll share the details about your company’s risk of attacks that stem from the use of stolen data.
