The word “password” has lost its top billing as the most common internet password — to be replaced by the far more secure 123456.