If you’re using one of these world’s worst passwords – change it now!

It’s hard to believe people still aren’t getting the message about creating strong passwords. Would you believe 123456 and password were still the most common passwords on 2014?

SplashData announced its annual list of the 25 worst passwords found on the internet.

The list was once again led by 123456 and password which alarmingly have held the top two spots since the lists were first compiled in 2011.

Other passwords on the list include qwerty, baseball and dragon.

SplashData’s list of the worst and most frequently used passwords demonstrates how users are putting themselves at risk online with weak and easily guessable passwords.

“Passwords based on simple patterns on your keyboard remain popular despite how weak they are,” said Morgan Slain, CEO of SplashData.

“Any password using numbers alone should be avoided, especially sequences. As more websites require stronger passwords or combinations of letters and numbers, longer keyboard patterns are becoming common passwords, and they are still not secure.”

Here is the full list of SplashData’s Worst Passwords of 2014:

1.  123456 (Unchanged from 2013)

2.  password (Unchanged)

3. 12345 (Up 17 places)

4.  12345678 (Down 1)

5.  qwerty (Down 1)

6.  1234567890 (Unchanged)

7.  1234 (Up 9)

8.  baseball (New)

9.  dragon (New)

10.  football (New)

11.  1234567 (Down 4)

12.  monkey (Up 5)

13.  letmein (Up 1)

14.  abc123 (Down 9)

15.  111111 (Down 8)

16.  mustang (New)

17.  access (New)

18.  shadow (Unchanged)

19.  master (New)

20.  michael (New)

21.  superman (New)

22.  696969 (New)

23.  123123 (Down 12)

24.  batman (New)

25.  trustno1 (Down 1)

So how can make your passwords strong and secure? Online security company AVG have come up with some suggestions to create new, separate passwords for every site we use.

AVG says it’s length rather than complexity that make passwords harder to crack.

Here are AVG’s three steps to follow:

1. Choose three random words that total 12 or more letters. For example, lightning, anchor, planet

2. Add some symbols, numbers and capitalisations – lightning3Anchorplanet!

3. Chose your own method to make each different and unique for every site. For example you might have a word starting with F in your password for Facebook or a word starting with a capital T for Twitter etc.