Zak Doffman, Contributor
2025-08-31 06:08:00
www.forbes.com
Do not use these passwords — ever.
getty
Your newsfeed is likely littered with headlines (1,2) warning you to change your Gmail password after a Google breach. Not because your password leaked — but because most passwords are rarely changed despite being used across multiple accounts.
This isn’t a Google or even a Gmail issue — it’s a widespread password issue. And while two-factor authentication (not SMS) and passkeys make this better, you still need to pay attention to your passwords. A weak or reused password is a gift to hackers.
While some passwords are bad the world over, there are regional variances. Here are the worst passwords in United States, courtesy of NordPass. Two lists — one for personal accounts and one for work accounts.
Let’s start with the worst 20 passwords on personal accounts in the U.S.
America’s worst passwords — at home.
NordPass
The risk in using these kinds of passwords on a Google, Meta/Facebook or Amazon account is huge — especially where the account doesn’t mandate 2FA or where you use SMS one-time codes for 2FA, which are easily stolen or bypassed.
But those risks are much greater at work, where your weak password potentially opens enterprise systems and networks to attack, and can even be an initial access point for ransomware attacks against the organization you work for.
Many enterprises now mandate 2FA for key systems, which protects against more than 99% of intrusions. That’s why recent headline ransomware attacks have used social engineering to steal 2FA codes rather than relying on technical exploits.
But 2FA isn’t mandated for all systems — and it takes just one weak point to open a door to attackers searching for a way in. There are the 20 worst passwords at work:
America’s worst passwords — at work.
NordPass
If any of your passwords are on either list, change them right now. All of them. And make sure you replace them with strong, unique passwords that you don’t use across any other accounts. There’s some good advice on strong passwords here.
The easiest way is to use a standalone password manager — not one built into a browser, even the wildly popular Google password manager in Chrome. Then add an authenticator app for 2FA and a passkey for all accounts where you can.
Enhance your driving experience with the P12 Pro 4K Mirror Dash Cam Smart Driving Assistant, featuring Front and Rear Cameras, Voice Control, Night Vision, and Parking Monitoring. With a 4.3/5-star rating from 2,070 reviews and over 1,000 units sold in the past month, it’s a top-rated choice for drivers. The dash cam comes with a 32GB Memory Card included, making it ready to use out of the box. Available now for just $119.99, plus a $20 coupon at checkout. Don’t miss out on this smart driving essential from Amazon!
Help Power Techcratic’s Future – Scan To Support
If Techcratic’s content and insights have helped you, consider giving back by supporting the platform with crypto. Every contribution makes a difference, whether it’s for high-quality content, server maintenance, or future updates. Techcratic is constantly evolving, and your support helps drive that progress.
As a solo operator who wears all the hats, creating content, managing the tech, and running the site, your support allows me to stay focused on delivering valuable resources. Your support keeps everything running smoothly and enables me to continue creating the content you love. I’m deeply grateful for your support, it truly means the world to me! Thank you!
BITCOIN bc1qlszw7elx2qahjwvaryh0tkgg8y68enw30gpvge Scan the QR code with your crypto wallet app |
DOGECOIN D64GwvvYQxFXYyan3oQCrmWfidf6T3JpBA Scan the QR code with your crypto wallet app |
ETHEREUM 0xe9BC980DF3d985730dA827996B43E4A62CCBAA7a Scan the QR code with your crypto wallet app |
Please read the Privacy and Security Disclaimer on how Techcratic handles your support.
Disclaimer: As an Amazon Associate, Techcratic may earn from qualifying purchases.