A list of the 100 worst passwords of 2018 has been published online, and "123456" and "password" have taken the top two spots. These howlers are closely followed by the equally poor "123456789," "12345678," and "12345." The annual list of the most-used worst passwords is compiled by SplashData, the company that created the SplashID and TeamsID password managers.
https://www.notebookcheck.net/123456-and-password-are-officially-2018-s-worst-passwords.381181.0.html