For the second year in a row, "123456" remained the worst password.
The list was put together by SplashData, a company that provides various password management utilities that it compiled the list by analyzing more than five million user records leaked online in 2017.