#4 – password
No points for originality here. SplashData says this password OG was the most common one until 2013, when 123456 took over that spot. Now in use on a mere 360,467 logins, it still managed to be hacked 3.8 million times, each time in less than a second.