Fiber optic cables feed into a switch inside a communications room at an office in London, U.K., on Monday, May 21, 2018. The Department of Culture, Media and Sport will work with the Home Office to publish a white paper later this year setting out legislation, according to a statement, which will also seek to force tech giants to reveal how they target abusive and illegal online material posted by users. Photographer: Jason Alden/Bloomberg via Getty Images
Bloomberg/Bloomberg/Bloomberg via Getty Images
Fiber optic cables feed into a switch inside a communications room at an office in London, U.K., on Monday, May 21, 2018. The Department of Culture, Media and Sport will work with the Home Office to publish a white paper later this year setting out legislation, according to a statement, which will also seek to force tech giants to reveal how they target abusive and illegal online material posted by users. Photographer: Jason Alden/Bloomberg via Getty Images
Now playing
02:18
How to protect yourself from hackers
screengrab japan fukushima daiichi
IAEA
screengrab japan fukushima daiichi
Now playing
02:31
Japan plans to release treated Fukushima water into sea
SUEZ, EGYPT - MARCH 29: The container ship 'Ever Given' is refloated, unblocking the Suez Canal on March 29, 2021 in Suez, Egypt. This morning the container ship came partly unstuck from the shoreline, where it ran aground in the canal last Tuesday, and later resumed its course shortly after 3pm local time. The Suez Canal is one of the world's busiest shipping lanes and the blockage had created a backlog of vessels at either end, raising concerns over the impact on global shipping and supply chains. (Photo by Mahmoud Khaled/Getty Images)
Mahmoud Khaled/Getty Images
SUEZ, EGYPT - MARCH 29: The container ship 'Ever Given' is refloated, unblocking the Suez Canal on March 29, 2021 in Suez, Egypt. This morning the container ship came partly unstuck from the shoreline, where it ran aground in the canal last Tuesday, and later resumed its course shortly after 3pm local time. The Suez Canal is one of the world's busiest shipping lanes and the blockage had created a backlog of vessels at either end, raising concerns over the impact on global shipping and supply chains. (Photo by Mahmoud Khaled/Getty Images)
Now playing
00:57
Egypt seizes Ever Given ship, asks for $900M in compensation
Taiwan has been the chief source of tension between Washington and Beijing for decades and is widely seen as the most likely trigger for a potentially catastrophic US-China war. The worry about Taiwan comes as China wields new strength from years of military buildup. CNN's David Culver reports.
PLA Air Force/Weibo
Taiwan has been the chief source of tension between Washington and Beijing for decades and is widely seen as the most likely trigger for a potentially catastrophic US-China war. The worry about Taiwan comes as China wields new strength from years of military buildup. CNN's David Culver reports.
Now playing
04:04
Dramatic videos show Chinese naval exercises amid rising tensions over Taiwan
CNN
Now playing
05:40
Unprecedented footage shows front line of Ukrainian conflict with Russia
5995404 02.09.2019 Iranian Foreign Minister Mohammad Javad Zarif attends a news conference following his meeting with his Russian counterpart Minister Sergei Lavrov, in Moscow, Russia. Iliya Pitalev / Sputnik  via AP
Iliya Pitalev/SPTNK/Sputnik via AP
5995404 02.09.2019 Iranian Foreign Minister Mohammad Javad Zarif attends a news conference following his meeting with his Russian counterpart Minister Sergei Lavrov, in Moscow, Russia. Iliya Pitalev / Sputnik via AP
Now playing
04:09
Iran accuses Israel of sabotaging nuclear site, vows revenge
Ash rises into the air as La Soufriere volcano erupts on the eastern Caribbean island of St. Vincent, seen from Chateaubelair, Friday, April 9, 2021. (AP Photo/Orvil Samuel)
Orvil Samuel/AP
Ash rises into the air as La Soufriere volcano erupts on the eastern Caribbean island of St. Vincent, seen from Chateaubelair, Friday, April 9, 2021. (AP Photo/Orvil Samuel)
Now playing
01:08
See the looming clouds of ash over La Soufrière volcano
screengrab Vanuatu villagers mourn philip
Reuters
screengrab Vanuatu villagers mourn philip
Now playing
02:03
Remote tribe worships Prince Philip as god, mourns his death
ITN
Now playing
01:15
Prince Charles speaks following Prince Philip's death
LONDON, UNITED KINGDOM - APRIL 10: The Honourable Artillery Company fire a gun salute at The Tower of London on April 10, 2021 in London, United Kingdom.  The Death Gun Salute will be fired at 1200 marking the death of His Royal Highness, The Prince Philip, Duke of Edinburgh. Across the country and the globe saluting batteries will fire 41 rounds, 1 round at the start of each minute, for 40 minutes. Gun salutes are customarily fired, both on land and at sea, as a sign of respect or welcome. The Chief of the Defence Staff, General Sir Nicholas Carter, said "His Royal Highness has been a great friend, inspiration and role model for the Armed Forces and he will be sorely missed." (Photo by Chris Jackson/Getty Images)
Chris Jackson/Getty Images
LONDON, UNITED KINGDOM - APRIL 10: The Honourable Artillery Company fire a gun salute at The Tower of London on April 10, 2021 in London, United Kingdom. The Death Gun Salute will be fired at 1200 marking the death of His Royal Highness, The Prince Philip, Duke of Edinburgh. Across the country and the globe saluting batteries will fire 41 rounds, 1 round at the start of each minute, for 40 minutes. Gun salutes are customarily fired, both on land and at sea, as a sign of respect or welcome. The Chief of the Defence Staff, General Sir Nicholas Carter, said "His Royal Highness has been a great friend, inspiration and role model for the Armed Forces and he will be sorely missed." (Photo by Chris Jackson/Getty Images)
Now playing
02:03
Prince Philip tributes pour in from around the world
CNN Weather
Now playing
01:35
Powerful Tropical Cyclone Seroja takes aim at Western Australia
People view flowers left in front of the gate at Buckingham Palace in London, after the announcement of the death of Britain's Prince Philip, Friday, April 9, 2021. Buckingham Palace officials say Prince Philip, the husband of Queen Elizabeth II, has died. He was 99. Philip spent a month in hospital earlier this year before being released on March 16 to return to Windsor Castle.
Matt Dunham/AP
People view flowers left in front of the gate at Buckingham Palace in London, after the announcement of the death of Britain's Prince Philip, Friday, April 9, 2021. Buckingham Palace officials say Prince Philip, the husband of Queen Elizabeth II, has died. He was 99. Philip spent a month in hospital earlier this year before being released on March 16 to return to Windsor Castle.
Now playing
01:54
Tributes to Prince Philip pour in from around the world
Britain's Prince Philip, Duke of Edinburgh, in his role as Captain General, Royal Marines, attends a Parade to mark the finale of the 1664 Global Challenge on the Buckingham Palace Forecourt in central London on August 2, 2017.  
After a lifetime of public service by the side of his wife Queen Elizabeth II, Prince Philip finally retires on August 2, 2017,at the age of 96. The Duke of Edinburgh attended a parade of Royal Marines at Buckingham Palace, the last of 22,219 solo public engagements since she ascended to the throne in 1952.
 / AFP PHOTO / POOL / HANNAH MCKAY        (Photo credit should read HANNAH MCKAY/AFP/Getty Images)
HANNAH MCKAY/AFP/Getty Images
Britain's Prince Philip, Duke of Edinburgh, in his role as Captain General, Royal Marines, attends a Parade to mark the finale of the 1664 Global Challenge on the Buckingham Palace Forecourt in central London on August 2, 2017. After a lifetime of public service by the side of his wife Queen Elizabeth II, Prince Philip finally retires on August 2, 2017,at the age of 96. The Duke of Edinburgh attended a parade of Royal Marines at Buckingham Palace, the last of 22,219 solo public engagements since she ascended to the throne in 1952. / AFP PHOTO / POOL / HANNAH MCKAY (Photo credit should read HANNAH MCKAY/AFP/Getty Images)
Now playing
01:39
The life of Prince Philip, Duke of Edinburgh
screengrab myanmar ambassador to UK
CNN
screengrab myanmar ambassador to UK
Now playing
01:02
Video shows Myanmar's ambassador 'locked out' of embassy
King Abdullah II of Jordan and his half brother, former crown prince Hamzah bin Al Hussein
AFP/Getty Images
King Abdullah II of Jordan and his half brother, former crown prince Hamzah bin Al Hussein
Now playing
02:39
Jordan's King breaks silence about family fallout
CNN
Now playing
06:13
Inside Iraq's crippling crystal meth crisis
(CNN Business) —  

If “123456” is your password, it may be time for a change.

That was the unsurprising conclusion of a survey revealing the internet’s most vulnerable passwords, which also warned that codes using names, sports teams and swear words are more popular than you might think.

The survey, by the UK’s National Cyber Security Centre (NCSC), analyzed passwords belonging to accounts worldwide that had been breached.

Several combinations of numbers made up the top 10, while “blink182” was the most popular musical artist and “superman” the most common fictional character.

But “123456” was the runaway winner, with 23.2 million accounts using the easy-to-crack code. “123456789” was used by 7.7 million, while “qwerty” and “password” were each used by more than 3 million accounts.

Ashley and Michael were the most common names used, followed by Daniel, Jessica and Charlie.

Liverpool topped the table of Premier League football clubs used as passwords, with Chelsea, Arsenal and Manchester United (“manutd”) making up the rest of the top four. Manchester City (“mancity”), by contrast, would finish in 11th place in the Premier League password standings.

The Dallas Cowboys (“cowboys1”) was the most popular NFL team nickname, while Sunday was the most used day of the week and August the most common month.

The top 10 most common passwords were:

  1. 123456
  2. 123456789
  3. qwerty
  4. password
  5. 111111
  6. 12345678
  7. abc123
  8. 1234567
  9. password1
  10. 12345

“iloveyou” just missed out on the top 10, while “monkey” and “dragon” made surprise appearances in the top 20. Plenty of users also used passwords as an opportunity to employ a colorful array of swear words.

The NCSC recommended using three “random but memorable” terms in a password, to reduce the risk of having an account breached.

“Password re-use is a major risk that can be avoided – nobody should protect sensitive data with something that can be guessed, like their first name, local football team or favorite band,” Ian Levy, NCSC Technical Director, said in a statement.

“Using hard-to-guess passwords is a strong first step and we recommend combining three random but memorable words. Be creative and use words memorable to you, so people can’t guess your password,” he added.