Top 10,000 passwords are used by 98.8% of all users
Bruteforce hackers
- Bruteforce hackers need only test 10,000 passwords, to be almost certain to guess your password.
- 91% of all user passwords sampled all appear on the list of just the top 1,000 passwords.
- http://xato.net/passwords/more-top-worst-passwords/#more-269
What other facts about passwords are known?
- 4.7% of users have the password password;
- 8.5% have the passwords password or 123456;
- 9.8% have the passwords password, 123456 or 12345678;
- 14% have a password from the top 10 passwords
- 40% have a password from the top 100 passwords
- 79% have a password from the top 500 passwords
- 91% have a password from the top 1000 passwords
What are the top 25 passwords?
Password
password,
123456,
12345678,
1234,
qwerty,
12345,
dragon,
pussy,
baseball,
football,
letmein,
monkey,
696969,
abc123,
mustang,
michael,
shadow,
master,
jennifer,
111111,
2000,
jordan,
superman,
harley,
1234567,
In conclusion:
Consider using a password strength checker to strengthen your password – like passwordmeter.com
*****
How to write a password that takes over 35 quadrillion years to crack (but is easy to remember)
https://uwnthesis.wordpress.com/2016/03/27/how-to-write-a-password-that-takes-over-35-quadrillion-years-to-crack-but-is-easy-to-remember/
Trackbacks & Pingbacks
- Top 10,000 Passwords Are Used By 98.8% Of All Users | Abilene Alternative News
- server hacked into
- Waarom je op iedere website een ander wachtwoord wilt gebruiken
- BlackBerry Password Keeper Escrow Key: Have We Just Found a Hidden Backdoor? « Advanced Password Cracking – Insight
- Karl Voit on Security | Irreal
University of South Wales: Cyber University of the year: Four years running: 2019, 2020, 2021, 2022 
How can I specify this article as a source for my research work? Can I find it in Articles published on paper?
LikeLiked by 1 person
I have a copy of a 4.09 GB wordlist / dictionary, crackstation.txt. Just now the words and numbers are arranged in the usual order: 0123456789aAbBcCdDeEfFgGhHiIjJkKlLmMnNoOpPqQrRsStT uUvVwWxXyYzZ
How do I rearrange the order to something like:
tTaAsShHwWiIoObBmMfFcCdDpPnNeEgGrRyYuUvVjJkKqQzZxX 1023985467
(This sequence gives the first letters of English words in order of popularity, from most popular (left) to least popular (right))
LikeLiked by 1 person
Hi Carl,
Are you just looking for a list that runs in order of popularity? You might be better off with a small and faster list, that just targets the weak passwords, as the fastest solution.
LikeLike
Thank you, no. Right now I’m using a Linux script called “password inspector”- pw-inspector -to trim the list (crackstation.txt) down to passwords made up of from 8 to 15 characters with the command: m 8 M 15. My goal is a Linux command or a Kali Linux script that will enable me to rearrange the list in order of most frequent first letters of English words, from tT to xX.
LikeLike
Start here:
https://news.ycombinator.com/item?id=4076556
There are lots of hacking forums and blogs that will show you how to succeed in this.
Linux commands training from Red Hat.
http://www.tecmint.com/sort-command-linux/
LikeLike
Thank you very much. I will follow up on your suggestions.
LikeLike
Why are the facts that you give in this article different from the facts in the link you provide?
Fact here:
4.7% of users have the password password;
8.5% have the passwords password or 123456;
9.8% have the passwords password, 123456 or 12345678;
14% have a password from the top 10 passwords
40% have a password from the top 100 passwords
79% have a password from the top 500 passwords
91% have a password from the top 1000 passwords
Facts at http://xato.net/passwords/more-top-worst-passwords/#more-269 :
0.5% of users have the password password;
0.4% have the passwords password or 123456;
0.9% have the passwords password, 123456 or 12345678;
1.6% have a password from the top 10 passwords
4.4% have a password from the top 100 passwords
9.7% have a password from the top 500 passwords
13.2% have a password from the top 1,000 passwords
30% have a password from the top 10,000 passwords
LikeLike
How are the facts different from the source?
LikeLike
bigpasswordlist.com
LikeLike