Just because you can remember how to count to six doesn’t mean you should be using it as a password to get into your online accounts.

But apparently “123456” and other bad ideas are still happening, according to a new study on the worst passwords of the year as reported on by USA Today.

The list, by security company SplashData, is based on more than five million passwords leaked during the year. The company estimates nearly 3 percent of people used the worst password on the list, while almost 10 percent have used at least one of the top 25, according to USA Today.

The word “password” was No. 2 on the list and other gems for getting at your email or your bank statement include “letmein,” “iloveyou,” “abc123” and “login.”

SplashData CEO Morgan Slain said hackers also tend to try words tied to pop culture or sports, so maybe rethink the use of “starwars,” despite how much you loved “The Last Jedi.”

Check out the top 20 in the tweet below:

Like what you're reading? Subscribe to GeekWire's free newsletters to catch every headline

Job Listings on GeekWork

Find more jobs on GeekWork. Employers, post a job here.