“123456” is still the world’s most common password, and an attacker with a leaked database cracks it in under a millisecond.

source