For World Password Day (1st May 2025), a survey finds that over 3.6 million passwords used by Premier League fans worldwide are easy-to-hack. The study revealed that Liverpool fans are the most likely to be hacked, with 949,439 passwords included in data breaches formed of the phrases ‘liverpool’ (compromised 552,504 times) and ‘liverpoolfc’. Fans of the Premier League champions account for 26.1 per cent of all passwords from fans across the league that have been leaked in data breaches.
The survey comes from TipMan Tips, who assessed compromised password data to reveal how many times passwords for several terms related to each of the 20 Premier League clubs have been exposed.
The findings show that 3,642,543 passwords have been leaked in data breaches between fans of all Premier League teams, leaving fans worldwide at risk of being hacked.
The top 10 football teams most commonly used in online passwords:
| Rank | Premier League fanbase | The most commonly used password by fans | Total number of compromised club passwords |
| 1 | Liverpool | liverpool | 949,439 |
| 2 | Chelsea | chelsea | 697,202 |
| 3 | Arsenal | arsenal | 593,592 |
| 4 | Manchester United | manunited | 190,289 |
| 5 | Everton | everton | 180,641 |
| 6 | Crystal Palace | eagles | 159,516 |
| 7 | Newcastle United | newcastle | 131,895 |
| 8 | Tottenham Hotspur | tottenham | 126,777 |
| 9 | West Ham United | westham | 114,236 |
| 10 | Wolverhampton Wanderers | wolves | 100,646 |
The study shows that Chelsea fans are the second-most at risk. There are 697,202 passwords related to the London club that have been compromised by data breaches, with ‘chelsea’ and ‘chelsea1’ making up over 550,000 of these.
In third, Arsenal fans are also likely to be hacked, as 593,592 common passwords have been leaked that include terms linked to the club. The most popular used by fans were ‘arsenal’ and ‘gunners’, showing that even nicknames are being overly used by supporters.
There is a large drop-off to fourth, which is taken by Manchester United fans. Despite being more complex due to being made up of two words, there have been 190,289 passwords included in data breaches. Data shows that ‘manunited’, ‘manchesterunited’, and ‘reddevils’ make up over 100,000 of these easily hackable passwords.
Everton fans are in fifth, but fans won’t be happy to know that their highest finish in years is because their passwords are too simple. Passwords such as ‘everton1’ and ‘toffees’ have been exposed in 180,641 data breaches.
Cybersecurity expert James Bore, of technology consultancy firm Bores has told Digital Journal in a statement: “Criminals now know, beyond any doubt, how common these passwords are, and when people use the same password for multiple services with the same username or email, it makes them an easy target.”
