Password management firm SplashData released its annual list of the 100 worst password character combinations in 2018. As Fortune magazine reported on Saturday, "123456" topped the list this year, followed by the other all too commonly used password, "password".

RSA SecurID Internet Security Token. (File photo: VCG)

A bad password is one that is commonly used, or easy for hackers to guess.

Among the top ten other commonly used and easy to crack passwords were "111111", "sunshine", "qwerty", and "iloveyou". One surprising addition to this year's list of the worst combination of characters to use was "donald", which took the 23rd spot on the list.