123456 was the most common password of 2016, followed by '123456789' and 'qwerty', according to researchers who reviewed over 10 million security codes that became public following data breaches.