Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am building a website, and I'd like to make sure the users don't put an overused password like password or password1.. or any of these

Is there a place that constantly analyzes hacked websites passwords list and have a DB of the password usage statistics?

share|improve this question

closed as not constructive by Terry Chia, Polynomial, AviD Dec 3 '12 at 10:30

As it currently stands, this question is not a good fit for our Q&A format. We expect answers to be supported by facts, references, or expertise, but this question will likely solicit debate, arguments, polling, or extended discussion. If you feel that this question can be improved and possibly reopened, visit the help center for guidance.If this question can be reworded to fit the rules in the help center, please edit the question.

Hi Nick, this question is not really a good fit for SE, as it stands now. Perhaps you might want to change to something like "How can I prevent bad passwords", or "What should I do to prevent bad passwords". – AviD Dec 3 '12 at 10:32
up vote 3 down vote accepted

Here is a article with the data I hope you needed:

There you can find two files with password and small statistics

share|improve this answer
I also wonder if this kind of research keeps updating – Nick Ginanto Dec 2 '12 at 16:10
Sadly to say, but most probably no. I found the link to this site from – Salvador Dali Dec 2 '12 at 17:22
The password analysis is done on password lists leaked from security compromises at major websites. When more passwords get disclosed, the analysis does get updated, but hopefully these sites learn their lesson and start hashing passwords. – tylerl Dec 2 '12 at 17:41
As for my list at, I do keep collecting passwords every day. I am currently working on improving my parser but as soon as I finish that I have a few gigabytes of passwords dumps to process. The fact is, however, that the top 1,000 passwords lists have hardly changed much over the last 20 years. – Mark Burnett Dec 3 '12 at 6:55
thanks for nice job, you are doing. If you need any help with parser, I am willing to help :-) – Salvador Dali Dec 3 '12 at 12:01

Not the answer you're looking for? Browse other questions tagged or ask your own question.