“We have seen an effort by many people to be more secure by adding characters to passwords, but if these longer passwords are based on simple patterns they will put you in just as much risk of having your identity stolen by hackers,” SplashData chief executive Morgan Slain said in a statement.

http://blogs.wsj.com/digits/2016/01/19/qwerty-and-123456-top-list-of-2015s-worst-passwords/