If you see your password on this list, change it as soon as possible

• NordPass released a list of the 200 most common passwords of the year 2020 this week.
• Most of the passwords on this list also appeared on the 2019 list, and a vast majority of them can be cracked by a hacker in less than a second.
• If you’re using any of these passwords, change them right away, and be sure to follow all the best practices for making a secure password that can’t be easily cracked.

Every year, the specter of cybersecurity attacks becomes more daunting as hackers find new and increasingly brilliant ways to trick us into handing over information. Everyone should on high alert when visiting a new website, opening an email, or even clicking a link in a text message — but all of these dire threats have still yet to stop us from coming up with the worst passwords imaginable to protect our most important online accounts.

This week, password manager NordPass published its list of the 200 most common passwords of 2020, and if you thought that we might have made progress as a society in recent years when it comes to making passwords, you can disabuse yourself of those optimistic notions. Of the 200 most popular passwords this year, a board majority could be cracked by a bad actor in less than a second. If you currently use any of the passwords on the NordPass list that fall into this category, you are constantly an instant away from having your data stolen.

You can visit NordPass’s website to see the entire list of passwords — which includes interesting data points like how many people are using the password, how much time the password would take to crack, and how many times each of the passwords were exposed — but here are the 25 most common passwords of 2020:

1. 123456
2. 123456789
3. picture1
4. password
5. 12345678
6. 111111
7. 123123
8. 12345
9. 1234567890
10. senha
11. 1234567
12. qwerty
13. abc123
14. Million2
15. 000000
16. 1234
17. iloveyou
18. aaron431
19. password1
20. qqww1122
21. 123
22. omgpop
23. 123321
24. 654321
25. qwertyuiop

I think my favorite revelation from the list is that “12345” has dropped from the top spot to #8, while “123456” has taken its place at #1. Basically, over the course of the last year, the most progress we’ve made is adding one extra number to the stupidest possible password, making it approximately 0% more secure.

Of course, the point of making this list wasn’t just to put people who use these passwords on blast. NordPass also offered up a list of useful tips for creating stronger passwords, like avoiding dictionary words, repetitive or sequential characters, and any personal details. The best passwords are at least 12 characters long, utilize a mix of upper- and lower-case letters, numbers, and symbols, and are never used across multiple accounts.

Use a password generator to generate strong strings, keep track of them all with a password manager, and change your passwords more than once a year. These aren’t the most fun rules to live by, but if you want to ensure that all of your online data and accounts are secure, they’re important to make part of your life.