berzerk0

Torrents are back! Mostly.

Two out of the 12 aren't, but every wordlist can be downloaded via torrent in at least 3 compressed formats, including .7z

Dropbox has their zxcvbn method which incorporates a list of 30k of the most common passwords

https://github.com/dropbox/zxcvbn

Hadn't heard of that before, I'll look into it

Speaking of rarely updated - version two will come out mid-July at the latest.

I'm also going to attempt to attribute the sources to given countries or at least language families. The list as it stands has a heavily US-centric bias.

I plan to grep through it and pull out things like Cyrillic or Arabic characters, and then repeat the process using only those characters. That's not to say that everyone who uses Arabic or Cyrillic characters is guaranteed to use them, but it's more specific.

If "password" is #2 in the world, perhaps пароль (password) will be the #2 most popular password with Russian Cyrillic Characters

As I was looking around for the files to make this project, on SecLists, Weakpass, and Hashes.org, most of the files were in alphabetical order. This was especially true for the larger files.

The largest list is 20GB, but it's not the only one.

Popularity was based on how many they appeared in files that had all duplicates removed (in reference to themselves)

The smallest file had passwords that appeared 75+ times, and the largest file had passwords that appeared 2+ times.

The top 195 Thousand (which appeared 25+ times in analysis) clocks in at 803kb as a text file with nothing but the passwords themselves

This is similar to my train of thought.

Year after year people still use the same passwords that were the most popular for the year before. I think we should make it as obvious as possible that it is worth your time to make secure passwords.

I think people know that they shouldn't use "password" as a password, but it just needs to be made very clear through safe means (such as publishing wordlists that don't have any associated user data) that it leaves you very vulnerable. Many people simply haven't stopped to wonder how secure their password is.

My goal with this project is to flip the status of the passwords on the list - and make them the LEAST likely to be used.

You know, you're not the first person to bring that up - and I am having seed problems.

Perhaps next rev I'll only include the .7z (smallest) and greppable formats.

Having issues with the Seedbox, torrents are down temporarily.

The main page contains links to Mega.NZ alternative downloads. Will be fixed shortly, apologies for the inconvenience.