A Password Wordlist is a curated, structured collection of words, phrases, patterns, and character combinations commonly used in real-world passwords. This wordlist is designed to support security testing, password auditing, penetration testing, digital forensics, and research.
Unlike generic dictionaries, this wordlist is optimised for password behaviour and includes
Key Features
Real-world relevanceContains frequently used passwords, keyboard patterns, character substitutions, and culturally common terms. Optimised for cracking toolsFully compatible with Hashcat, John the Ripper, Hydra, Medusa, and other password-testing frameworks. Multi-category structureIncludes general words, names, dates, pop culture terms, keyboard patterns, and hybrid password formats. High quality & deduplicatedCleaned, normalised, deduped, and sorted to ensure maximum efficiency and minimal waste during brute-force operations. Language & region variationsIncludes English and optional multilingual expansions (e.g., Chinese, Spanish, French) for enhanced coverage. Rule-friendly formattingWorks seamlessly with password-mutation rules (leetspeak, case flips, suffix additions, year patterns, etc.).
Use Cases
Penetration Testing – Evaluate password strength and identify weak credentials. Security Audits – Assess enterprise password policies and vulnerability exposure. Forensics – Recover encrypted or abandoned user accounts during investigations. Research – Analyse password trends, behaviours, and cognitive patterns. Training & Education – Demonstrate brute-force or dictionary attacks safely.
Benefits
Accelerates password-testing workflows Improves accuracy over random brute force Helps organisations enforce stronger password hygiene Suitable for both beginners and professional testers
Where the data comes from now
- SecLists (danielmiessler) — Widely used open collection of password, username and fuzzing wordlists; actively maintained.
- Have I Been Pwned – Pwned Passwords — Free downloadable hashes of over a billion breached passwords with counts; periodically refreshed.
Where to get it
glitchdata catalogues this dataset but does not host the files here. It is published in the glitchdata shop (US$50), where the download covers every format listed above.
Last updated on the source site: 2025-11-20.