2015 has come and gone, and a security research firm has published their annual “Worst Passwords” list. Based on leaked password data that has gone public through the year, they have published the 25 worst passwords – is yours on the list?

According to SplashData, these are the 25 worst passwords (and a comparison to their position on the 2014 list) based on how often they were used in those leaks:

1. 123456 (unchanged)
2. password (unchanged)
3. 12345678 (up 1)
4. qwerty (up 1)
5. 12345 (down 2)
6. 123456789 (unchanged)
7. football (up 3)
8. 1234 (down 1)
9. 1234567 (up 2)
10. baseball (down 2)
11. welcome (new)
12. 1234567890 (new)
13. abc123 (up 1)
14. 111111 (up 1)
15. 1qaz2wsx (new)
16. dragon (down 7)
17. master (up 2)
18. monkey (down 6)
19. letmein (down 6)
20. login (new)
21. princess (new)
22. qwertyuiop (new)
23. solo (new)
24. passw0rd (new)
25. starwars (new)

As you can see, there are some new ones on the list. However, while passwords like “1qaz2wsx” look secure, if you look at the position of those keys on a standard US Qwerty Keyboard, it’s not as secure as you’d think.

We recommend using a password manager to generate random, secure passwords for the sites you visit. You can read more about password managers on our password management tech tip.