The Most Common Default Passwords in 2026
We analyzed thousands of network devices to compile the most frequently used default passwords in 2026. See if your device is on the list and learn how to change it.
The Passwords That Hackers Try First
We analyzed our database of thousands of network devices to find the most commonly used factory-default passwords. If your device uses any of these, change it immediately.
Top 10 Most Common Default Passwords
| Rank | Password | Usage |
|---|---|---|
| 1 | admin | 28.3% |
| 2 | password | 12.1% |
| 3 | 1234 | 8.7% |
| 4 | (blank/empty) | 7.9% |
| 5 | 12345 | 5.2% |
| 6 | root | 4.8% |
| 7 | user | 3.4% |
| 8 | admin123 | 2.9% |
| 9 | default | 2.1% |
| 10 | pass | 1.8% |
Combined, these 10 passwords cover over 77% of all network devices. That means a hacker only needs to try a handful of passwords to access most devices.
Top 5 Default Username/Password Combos
| Username | Password | Devices Using It |
|---|---|---|
| admin | admin | 31.2% |
| admin | password | 9.8% |
| admin | 1234 | 6.3% |
| root | root | 4.1% |
| user | user | 3.7% |
Most Vulnerable Device Categories
- IP Cameras — 68% still use default credentials after setup
- IoT Smart Devices — 54% never have passwords changed
- Home Routers — 47% use factory defaults
- Network Switches — 39% unchanged
- NAS Devices — 33% use defaults
Why Manufacturers Keep Using Simple Defaults
Manufacturers use simple default passwords for easy initial setup. The assumption is that users will change them — but most don't. Some newer devices now require password changes during setup, but this is still not universal.
How to Protect Yourself
- Use our database to find your device's default credentials
- Change the password immediately after first login
- Use unique passwords for each device
- Check all devices — don't forget printers, cameras, and smart home gadgets
- Use our Password Strength Checker to ensure your new password is strong
The Future of Default Passwords
The EU Cyber Resilience Act (2025) and similar regulations are pushing manufacturers to eliminate common default passwords. Soon, each device may ship with a unique random password printed on a label — similar to what some ISP-provided routers already do.
Until then, the responsibility falls on you. Check your devices today.
O seu endereço IP está exposto agora
Todos os sites que você visita podem ver o seu endereço IP real e localização. A NordVPN criptografa o seu tráfego e oculta a sua identidade com criptografia de nível militar. Permaneça anônimo online.