I am building a website, and I'd like to make sure the users don't put an overused password like password or password1.. or any of these

Is there a place that constantly analyzes hacked websites passwords list and have a DB of the password usage statistics?

  • Hi Nick, this question is not really a good fit for SE, as it stands now. Perhaps you might want to change to something like "How can I prevent bad passwords", or "What should I do to prevent bad passwords".
    – AviD
    Commented Dec 3, 2012 at 10:32

1 Answer 1


Here is a article with the data I hope you needed:

There you can find two files with password and small statistics

  • I also wonder if this kind of research keeps updating Commented Dec 2, 2012 at 16:10
  • Sadly to say, but most probably no. I found the link to this site from howsecureismypassword.net Commented Dec 2, 2012 at 17:22
  • The password analysis is done on password lists leaked from security compromises at major websites. When more passwords get disclosed, the analysis does get updated, but hopefully these sites learn their lesson and start hashing passwords.
    – tylerl
    Commented Dec 2, 2012 at 17:41
  • 2
    As for my list at xato.net, I do keep collecting passwords every day. I am currently working on improving my parser but as soon as I finish that I have a few gigabytes of passwords dumps to process. The fact is, however, that the top 1,000 passwords lists have hardly changed much over the last 20 years. Commented Dec 3, 2012 at 6:55
  • thanks for nice job, you are doing. If you need any help with parser, I am willing to help :-) Commented Dec 3, 2012 at 12:01

Not the answer you're looking for? Browse other questions tagged .