When it comes to making up passwords, we’re not doing so great as a society.

在编密码这件事上，大部分人的表现都不怎么样。

Password management firm SplashData released its annual "Worst Passwords List," revealing that humans have remained rather indifferent to choosing unique, secure passwords since the company's first report in 2011. SplashData analyzed¹ more than 2 million leaked passwords in 2015 and found several trends in the most common ones.

密码管理公司“飞溅数据”近日发布了2015年度“最不安全密码排行榜”。通过此次调查，“飞溅数据”发现，虽然它从2011年就开始发这个榜，但人们对于选择一个独一无二的安全密码的觉悟还是不高。该公司对2015年遭泄露的200多万个密码进行分析，发现了以下几个特点。

“Password” and “123456” still claim the top two spots on the list, where they've remained for the past five years. Simple numerical passwords remain an easy go-to; six of the top 10 passwords are comprised of only numbers.

“Password”仍然是大家最爱用的密码，“123456”其次。这是它俩连续第5年霸占前两名了。大部分人还是青睐简单的数字密码。榜单前10名中有6个是纯数字密码。

You'll also find that references to sports and pop culture are fairly common. “Football” and “baseball” are both in the top 10 list, and in line with the release of The Force Awakens², “starwars,” “solo” and “princess” are all new entries on this year’s list.

体育和流行文化相关的词汇也在大家最爱用的密码之列。“Football”和“baseball”都位列前10；随着《星球大战：原力觉醒》的上映，“starwars”、“solo”和“princess”也首登今年的不安全密码榜。

Several others that weren't on the 2014 list include “welcome,” “login” and “passw0rd." Changing that "o" in password to a zero might seem original, but a lot of people had the same idea.

其他2014没有、2015新上榜的还有“welcome”、“login”和“passw0rd"。不要以为自己把“password”中的字母“o”换成数字“0”很有创意，其实很多人都想到了这点。

If you see your password on this list, make your 2016 resolution to do better.

如果你在本榜单上看到了你正在用的密码，就在2016年下定决心改了吧。

1. 123456

2. password

3. 12345678

4. qwerty

5. 12345

6. 123456789

7. football

8. 1234

9. 1234567

10. baseball

11. welcome

12. 1234567890

13. abc123

14. 111111

15. 1qaz2wsx

16. dragon

17. master

18. monkey

19. letmein

20. login

21. princess

22. qwertyuiop

23. solo

24. passw0rd

25. starwars

“飞溅数据”建议使用这样的密码

1. Use passwords with 12 characters or more with mixed types of characters.

最好在12个字符以上，混合多种字符类型（译者注：一个数字、一个字母、一个标点，都属于一个字符）。

2. Avoid using the same password over and over again on different websites.

不同网站的账户不要反复使用同一个密码。

3. Use a password manager, like SplashID or LastPass, to organize and protect passwords, generate random³ passwords and automatically log into websites.

可以使用密码管理器（如SplashID或LastPass）管理和保护密码，生成随机密码并自动登录网站账户。