Is Your Online Password On The Worst Password List?

By Krishnadev Calamur / NPR

Published January 21, 2015 at 6:09 AM PST

This story was published more than 9 years ago.

Over the years, NPR has done many stories on Internet passwords and how to come up with a secure one.

Lazy About Your Online Passwords? Take Control With These New Tips

The Most Secure Password In The World Might Be You

Become a KPBS sponsor

Prevent Your Password From Becoming Easy Pickings (Or PyPfbEp)

Hunting For A Password That Only You Will Know

You'd think we'd have learned how to craft a secure password by now. Turns out not so much.

SplashData, an Internet security services firm, has released its annual list of the 25 worst Internet passwords.

Here are the top 5:

Become a KPBS sponsor

123456 (Unchanged from 2013)
password (Unchanged)
12345 (Up 17)
12345678 (Down 1)
qwerty (Down 1)

New on the list this year are "baseball," "access," "master," "Michael," "superman," "696969" and "batman." The report, the fourth by SpashData, was compiled from more than 3 million passwords leaked during 2014.

(All this must mean batman12345 is OK!)

And, to add to NPR's stories about how to come up with a secure password, we'll add SplashData's tips:

"Use passwords of eight characters or more with mixed types of characters. "Avoid using the same username/password combination for multiple websites. "Use a password manager ... to organize and protect passwords, generate random passwords and automatically log into websites."