Most Common Passwords

Here is a list of the most common passwords (Source: http://geodsoft.com/howto/password/common.htm).

I was just wondering how many people have used any of this in past years?

I went through and found that about 4 of them listed were the excat ones that i have used before. Kinda scary knowing that your password is common and people know that its common.

If you notice symbols such as !@#$%^&* are only used in sequence. Whenever possible i would recommend using atleast one of those characters in your password. The famouse RPG http://www.nukezone.nu has recently changed their password system to allow those characters. Good move on their end.

Quote:

!@#$% !@#$%^ !@#$%^& !@#$%^&* 000000 00000000 0007 007 007007 0246 0249 1022 10sne1 111111 121212 1225 123 123123 1234 12345 123456 1234567 12345678 1234qwer 123abc 123go 1313 131313 13579 14430 1701d 1928 1951 1a2b3c 1p2o3i 1q2w3e 1qw23e 1sanjose 2112 21122112 2222 2welcome 3 369 4 4444 4runner 5 5252 54321 5555 5683 654321 666666 6969 696969 777 7777 80486 8675309 888888 90210 911 92072 99999999 @#$%^& a a12345 a1b2c3 a1b2c3d4 aaa aaaaaa aaron abby abc abc123 abcd abcd1234 abcde abcdef abcdefg abigail about absolut academia access action active acura adam adams adg adidas admin adrian advil aeh aerobics after again aggies aikman airhead airplane alan alaska albany albatross albert alex alex1 alexande alexander alexandr alexis alfred algebra aliases alice alicia aliens alison all allen allison allo alpha alpha1 alphabet alpine always alyssa ama amanda amanda1 amber amelie america america7 amiga amorphous amour amy an analog anchor and anderson andre andrea andrew andromache andy angel angela angela1 angels angie angus animal animals ann anna anne annie answer anthony anthropogenic antonio anvils any anything apache apollo apollo13 apple apple1 apples april archie arctic are aria ariadne ariane ariel arizona around arrow arthur artist as asdf asdfg asdfgh asdfghjk asdfjkl asdfjkl; ashley ask aspen ass ******* asterix at ate ath athena atmosphere attila august austin author avalon avatar away awesome aylmer aztecs azure babies baby babylon5 bacchus bach badboy badger bailey baker balls bamboo banana bananas banane bandit banks barbara barber barbie baritone barnes barney barry basebal baseball basf basil basket basketb basketba bass bassoon bastard batman be beagle beaner beanie bear bears beater beatles beautifu beauty beaver beavis because been beer beethoven before bell belle beloved benjamin bennett benny benoit benson benz beowulf berkeley berliner bernard bernie bertha beryl best better betty beverly bfi bicameral big bigbird bigdog bigfoot bigmac bigman bigred bilbo bill billy bingo binky biology bird bird33 birdie bitch biteme black blackie blaster blazer blizzard blonde blondie blowfish blowme blue bluebird bluesky bmw bob bobby bobcat bond007 boner bonjour bonnie booboo booger boogie bookit boomer booster boots bootsie boris boss boston both bowling bozo bradley brandi brandon brandy brasil braves brazil brenda brewster brian bridge bridges bridget bright bring broadway broncos brooke brooks brown browns bruce brutus bryant bubba bubba1 bubbles buck buddha buddy buffalo buffy bull bulldog bullet bullshit bumbling bunny burgess business buster but butch butler butthead button buttons buy buzz by byteme cactus caesar caitlin californ call calvin camaro camera campanile campbell camping can canada canced cancer candy canela cannon cannonda canon cantor captain cardinal carl carlos carmen carol carole carolina caroline carolyn carrie carry carter cascade cascades casey casio casper cassie castle cat catalog catfish catherine cats cayuga cccccc cedic celica celine celtics center cerulean cesar cfi cfj cgj challeng champion champs chance chanel change changeme chaos chapman charity charles charlie charlie1 charlott charming charon cheese chelsea cherry cheryl chester chester1 chevy chevy1 chicago chicken chico chiefs china chip chipper chiquita chloe chocolat chris chris1 chrissy christ christia christin christina christine christop christopher christy chuck chucky church cigar cinder cindi cindy claire clancy clarence clark class classic classroo claude claudia cleaner cleat clipper cloclo clover clusters cobra cocacola coco coffee coke cold coleman colleen college collins colorado coltrane columbia come commrades compaq compton compute computer concept condo connect connie conrad control cook cookie cookies cool coolman cooper copper cornelius corona corrado corwin cosmos cougar cougars could country courtney couscous cowboy cowboys cox coyote cracker craig crapp crawford creation creative creosote cretin cricket crow cruise crystal cuddles curtis cut cutie cyclone cynthia cyrano daddy daemon daisy dakota dallas dan dance dancer daniel danielle danny darren darwin dasha database dave david david1 davis dawn day daytek dead deadhead dean death debbie deborah debra december deedee defense defoe deliver delta deluge demo denali denise dennis denver depeche derek design desperate detroit deutsch develop dexter dgj diablo diamond diana diane diaz dickhead did dieter digger digital digital1 dilbert direct1 director dirk discovery disney dixie do doc doctor dodger dodgers does dog dogbert doggie doggy dollars dolphin dolphins dominic domino don don't donald done donkey donna doobie doogie dookie doom doom2 doris dorothy doug dougie douglas down dragon dragon1 dragonfl draw dream dreamer dreams drink drizzt drought drums duck duckie dude duke duncan dundee dustin dusty dwight dylan e-mail each eager eagle eagle1 eagles earl easier easter eat eatme eclipse eddie edges edinburgh edward edwards edwin edwina eeyore egghead eiderdown eight eileen einstein elaine electric elephant elizabet elizabeth ellen elliot elsie elvis elwood emerald emily emmitt energy engine engineer enigma enter enterprise entropy enzyme eric ernest ersatz espanol establish estate etoile euclid eugene europe evans evelyn every excalibu except explorer export express extension fail fairway faith falcon family far farmer farming fast felicia felix fender fermat ferrari ferret fgh fiction fidelity find finite fiona fire fireball firebird fireman first fish fish1 fisher fishers fishing five flakes flamingo flash fletch fletcher flight flip flipper float flores florida flower flowers floyd fluffy fly flyers foobar fool foolproof footbal football for ford foresight forest format forsythe foster found fountain four fourier fox foxtrot fozzie france frances francis francois frank frankie franklin freak1 fred freddy frederic freedom french1 friday friend friends frighten frodo frog frog1 froggy frogs from front242 frosty fubar ****er ****me ****off ****you fugazi full fun fungible funny future gabriel gabriell gaby galaxy galileo gambit gandalf garcia garden gardner garfield garlic garnet garrett gary gasman gateway gator gauss gave gemini general genesis genius george georgia gerald german gertrude get ghost giants gibson gilles ginger give gizmo glacier glenn global gloria gnu go goalie goat goblue gocougs godzilla goes gofish goforit going gold golden goldie golf golfer golfing gone gonzales gonzalez goober good goofy gopher gordon gorgeous gorges gosling got gouge grace graham grandma grant graphic grateful gray graymail green greenday greg gregory gretchen gretzky griffey griffin groovy grover grow grumpy gryphon guess guest guido guinness guitar gumption gunner guntis guru gymnast h2opolo hacker had hal9000 hall hamlet hammer hamster handily hanna hannah hansolo hanson happening happy happy1 happyday harley harmony harold harris harrison harry harvey has hatton have hawaii hawk hawkeye hayes hazel he health heart hearts heather hebrides hector heidi heinlein helen hell hello hello1 help helpme henderson hendrix henry her herbert here herman hermes hernandez hershey hiawatha hibernia hill him his history hobbit hockey hockey1 hola hold holly home homebrew homer honda honda1 honey hoops hootie horizon hornet hornets horse horses horus hot hotdog hotrod house houston how howard hughes hunter hunting hurt huskers hutchins i ib6ub9 icecream iceman idiot if iguana iloveyou image imagine imbroglio impala imperial in include indian indiana indigo info informix ingres inna innocuous insane inside intel intern internet into ireland irene irish irishman ironman is isaac isabelle isis island it italia italy its jack jackie jackson jacob jacqueline jaeger jaguar jake jamaica james james1 jan jane janet janice january japan jared jasmin jasmine jason jason1 jasper jazz jean jeanette jeanne jeff jeffrey jenifer jenkins jenni jennifer jenny jenny1 jensen jeremy jerry jesse jessica jessie jester jesus jesus1 jewels jim jimbo jimbob jimmy jixian jkm joan joanna joe joel joey john john316 johnny johnson jojo joker jonathan jones jordan jordan23 jose joseph josh joshua josie joyce jsbach juan judith judy juggle julia julian julie julie1 jump junebug junior jupiter justice justin justin1 karen katherin katherine kathleen kathryn kathy katie kayla keep keith kelly kelly1 kelsey kennedy kenneth kermit kernel kevin kevin1 khan kids killer killme kim kimberly kind kinder king kingdom kingfish kirkland kitten kitten12 kittens kitty kleenex knicks knight knights know koala koko kombat kramer kristen kristi kristin kristy krystal lacrosse laddie ladle lady ladybug lakers lakota lambda lamer lamination larkin larry larry1 larson laser last laugh laura lauren laurie law lawrence lazarus lebesgue ledzep lee legend leland lennon leon leonard leroy leslie lestat let letmein letter lewis library light like lillian lincoln linda lindsay lindsey lionking lisa list little live liverpoo lizard ljf lloyd logan logical lois london long look looney lopez lori lorraine loser louis louise love lovely loveme lover loveyou lucas lucky lucky1 lucy lulu lynn lynne mac macha macintos macintosh mack maddock maddog made madison maggie maggot magic magnum mailer mailman major majordom make malcolm malibu mantra many marc marcel marcus margaret maria mariah marie marilyn marina marine marino mario mariposa mark market markus marlboro marley mars marshal martha martin martin1 martinez marty marvin mary maryjane master master1 masters math matrix matt matthew maurice maveric maverick max maxime maxwell may mayday mazda1 me medical megan melanie melissa mellon memory memphis meow mercedes mercury merlin metal metallic mets mexico michael michael. michel michele michell michelle mickey micro midnight midori mikael mike mike1 mikey miki mildred miles miller millie million mimi mindy mine minimum minnie minou minsky mirage miranda mirror misha mishka mission missy misty mitch mitchell mittens modem moguls molly molly1 molson mom monday monet money money1 monica monique monkey monopoly monster montana montreal moocow mookie moomoo moon moore moose more morgan morley moroni morris mortimer mother mountain mouse mouse1 mozart much muffin murphy music mustang my myself nancy naomi napoleon nascar nat natasha nathan nautica ncc1701 ncc1701d ncc1701e ne1469 nebraska nellie nelson nemesis nepenthe nesbitt ness netware network never new newcourt newpass news newton newuser newyork next nguyen nicarao nicholas nick nicole niki nikita nimrod niners nirvana nirvana1 nissan nite no none norma norman not nothing notused now noxious nss nugget number number1 number9 nurse nutrition nyquist oatmeal obiwan oceanography ocelot october of off oil old olive oliver olivetti olivia olivier on once one online only open opus or oracle orange oranges orca orchid orion orlando orwell oscar osiris other ou812 our out outlaw over own oxford pacers pacific packard packer packers painless painter pakistan paladin pam pamela panda pandora pantera panther papa papers paris parker parrot part pascal pass passion passwd passwor password pat patches patricia patrick patterson paul paula peace peaches peanut pearl pearljam pebbles pedro peewee peggy penelope penguin penny pentium people peoria pepper pepsi percolate percy perez perry persimmon persona pete peter peterson petey petunia phantom phil philip phillip phillips phish phoenix phoenix1 photo phyllis piano picard picasso pick pickle picture pierce pierre piglet pinkfloy pirate pisces pizza planet plato play playboy player players please plover pluto plymouth pmc poiuyt polaris police politics polo polynomial pomme pondering poohbear pookie pookie1 popcorn popeye pork porsche porsche9 porter portland poster powell power ppp praise precious prelude preston pretty price prince princess princeton prof promethe property protect protel protozoa psalms psycho public puckett pull pumpkin puneet punkin puppet puppies puppy puppy123 purple put pyramid python q1w2e3 quality quebec quest qwaszx qwert qwerty qwerty12 rabbit racerx rachel rachmaninoff racing racoon radio raider raiders rain rainbow raindrop raistlin raleigh ralph rambo1 ramirez ran random randy ranger raptor raquel rascal rasta raven raymond read reader reading reality really rebecca rebels red reddog redrum redskin redwing reebok reed reefer reggie remember remote renee republic research retard reynolds reznor rhonda richard richardson rick ricky ride right ripper ripple river rivera robbie robert robert1 roberts robin robinhoo robinson robotech robotics rochester rock rocket rocky rodman rodriguez roger rogers rolex roman romano ronald rooster roping rose rosebud rosemary roses rosie ross round roxy roy royal royals ruben ruby rufus rugby rules run runner running russel russell rusty ruth rux ruy ryan sabrina sadie safety said sailing sailor sal sales sally salmon salut sam samantha sammie sammy sampler sampson samson samuel sanchez sanders sandra sandy sango sanjose1 santa sapphire sara sarah sarah1 sasha saskia sassy saturn savage saxon say sbdc scamper scarlet scarlett scheme school science scooby scooter scooter1 scorpio scorpion scotch scott scotty scout scruffy scuba1 sean seattle secret security see sendit senior sensor septembe serenity sergei service seven seven7 sexy shadow shadow1 shadows shall shalom shannon shanti shark sharks sharon shawn she sheba sheena sheffield sheila shelby sheldon shelley shelly sherry shirley **** shithead shiva shivers shoes shooter shorty shotgun show shuttle sidney sierra signature silver simba simmons simon simple sing singer single sit six skater skeeter skidoo skiing skinny skipper skippy slacker slayer sleep small smashing smile smiles smiley smith smiths smokey smooch smother snake snapple snatch snicker snickers sniper snoopdog snoopy snow snowbal snowball snowman snuffy so soap soccer soccer1 socrates softball soleil some sonics sonny soon sophie sossina space spain spanish spanky sparky sparrow sparrows special speech speedo speedy spencer spider spike spirit spit spitfire spooky sports spring springer sprite spunky squires squirt ssssss stacey stanley star star69 stargate start startrek starwars station stealth steele steelers stella steph stephani stephanie stephen steve steven stever stewart stimpy sting1 stingray stinky stop storm stormy strangle strat stratford strawber strider stuart student studly stupid stuttgart subway success sugar summer sun sunbird sundance sunday sunflowe sunny sunny1 sunrise sunset sunshin sunshine super superman superstage support supported supra surf surfer susan suzanne suzuki swearer sweetie sweetpea sweets sweety swimmer swimming sydney sylvia sylvie symbol symmetry system t-bone tacobell taffy take tamara tammy tandy tangerine tango tanker tanner tanya tape tara tardis target tarragon tarzan tasha tattoo taurus taylor tazman teacher teachers tech techno teddy teddy1 telecom telephone tell temp temporal temptation ten tennis tequila teresa terry test test1 test123 test2 tester testing testtest texas thailand than thank that the theatre theboss their theking them theman then there theresa these they think this thomas thompson those three thumper thunder thunderb thursday thx1138 tiffany tiger tigers tigger tigre tim timber time timothy tina tinker tinman tintin to toby today todd together toggle tom tomato tomcat tommy tony too tootsie topcat topgun topher topography toronto torres tortoise toyota tractor tracy trails training travel travis trebor trek trevor tricia trident tristan trivial trixie trombone trouble truck trucks trumpet try tubas tucker tuesday turbo turner turtle tuttle tweety twins two tyler umesh undead unhappy unicorn unknown up upon urchin us use user1 utility utopia vader valentin valerie valhalla vampire vanessa vanilla vasant velvet venus vermont veronica vertigo very vette vicky victor victoria victory video viking vikings village vincent violet viper viper1 virginia visa vision volley volleyb volvo voodoo voyager walk walker walleye wally walter wanda wanker want warcraft ward warez warm warner warren warrior warriors was wash washington water watson way wayne we weasel webmaste webster weenie weezer welcome welcome1 well wendy went were wesley western whales what whateve whatever whatnot wheeling wheels when where which whisky white whiting whitney who why wicked wilbur wildcat will william williams williamsburg willie willow willy wilson win win95 windows windsurf winner winnie winston winter wisconsin wisdom wish with wizard wolf wolf1 wolfgang wolfman wolverin wolves wombat wonder wood woodland woodwind woody word work wormwood would wqsb wrangler wrestle wright write xanadu xavier xcountry xfiles xxx xxxx yaco yamaha yang yankees yellow yellowstone yoda yomama yosemite you young your yvonne zachary zap zapata zaphod zebra zenith zephyr zeppelin zeus zhongguo ziggy zimmerman zombie zorro zxcvb zxcvbnm

Thanks it's good to know my password isn't on there.

Hi spools...................never gave any of my cats those silly names :D

Try the euro symbol.............most of the old stuff won't find it?

Cheers

Mine ain't there either :D

The €tip is a good one, but most known pass crackers update their database often, and i bet there are already a bunch of combinations with €simbol in there.

A good ideia is to use special characters like 'ALT + something', i found that using ALT+0160 (equals the 'space') makes the crackers life a hell. Most of the proggies out there dont use it.

We all know the basics, you need to use lower/UPPER caps, number,math simbols and etc...but if you want to read about it try this site.

I would also recommend adding a color or number to the end of your password...
Instead of "walter" it will be "walter405" or "waltergreen"....... this makes the password longer which will take a lot more to crack and almost no dictionary used in a brute force program will have it.

Good post spools.exe !

but we still have someone out there using their cat's name !!!

here are other sites on good passwords dudes,

http://www.cs.umd.edu/faq/Passwords.shtml

http://www.alw.nih.gov/Security/Docs/passwd.html

http://wp.netscape.com/security/basics/passwords.html

http://security.uchicago.edu/docs/userpassword.shtml

http://archive.ncsa.uiuc.edu/SCD/Con...passwords.html

http://www.slac.stanford.edu/comp/se.../password.html

Dr_Evil

Its not that hard to have a cracker use an ASCI table though, because I know lophtcrack can accept special characters. spools.exe has the right idea by adding on something like a color. I tried lophtcrack in brute force against my 13 char mixed case alphanumeric password and it did it in less than a hour I believe. Needless to say I was rather suprised, and now I'm looking at 20 and 25 character passwords!

Its good to have a strong password...personally i made a password generator that generates the password randomly composed of numbers and letters...Then it saves them for you so you dont lose them....its better than using one password for everything

Quote:

Originally posted here by spools.exe
I would also recommend adding a color or number to the end of your password...
Instead of "walter" it will be "walter405" or "waltergreen"....... this makes the password longer which will take a lot more to crack and almost no dictionary used in a brute force program will have it.

just a thought I may be wrong but... I didn't think a brute force attack needs a dictionary... isn't it just a dictionary attack that uses a dictionary???

(a brute force attack would even crack a password like 4bn9hi7u£$ but it would take a very long time)

I hope this is right please correct me if I am wrong

here to help... c0bra

Lol neither is mine

lol i have 2 passwords in that list :) my problem is that i am too lazy to remember and complex password. bah, if anyone wants to hack into my AOL account so that they can read all my penis enlargment emails, go ahead, just please delete them when you are done :)

You getting those emails too White_Eskimo :p

I'm glad to see that only one of my passwords was in there, which is not bad considering that I've had to change my p/word to something unique every couple of weeks for the last 5 years. One good thing that we have at work (from a secy point of view) is that you can't reuse a password, not sure where it stores your previous p/words now that I come to think of it?

Most people just add an incrementing number to the start or end of their p/word but it does keep everyone on their toes and stops the same p/word (ie dog's name) from being used repeatedly.

Cheers All,

R.

Cobra Depends. Let's say you go and take the list that Spools posted and write a script to run through all those passwords no. There are also other ones where all they do is. Go through the entire Dictionary. (And I do mean Entire)

Those more then likely won't either. Now on a Brute Force it kind of all depends. I have seen Programs that will just go and go until they get it. Actually I am asking a friend about that right now.

But I will answer your question with a very old but true statement. If you take the watch on your wrist and break it into a million pieces and keep droping it. How long would it take for that watch to come together. It is very possible that it will but it will just take a hell of a long Time. Something most people don't have. Which mainly why they write Crackers to do it for them.

So with out the Stupid ass explanation yes. It very well could crack your password. Itjust needs *("TIME")*

The last thing to add to this is that. Most End Users have this great Idea that it isn't going to happen to them and that is the exact type of people that are looked for. It won't happen to you, so you don't need a FW,AV or anything. I won't happen to me so I can have Windows just remember my password to everything for me.

That said, there is always just one more thing that can mess up your password.

You can have a password like. (Hello203My-0-rotvvee234334254234) and guess what, there is always one way to. Get that password that is usually more sure then any Brute.

Ask

I would post my 70Mb Passw file, but I don't think JpM would be impressed :P
I wrote a post somewere on how to make good passwords that will not be cracked by any Dictionary method and will take almost forever to bruteforce, I'm to lazy to find the post atm, but if the search function is working, it can be found through that.

- Noia

Noia, you mean this thread: http://www.antionline.com/showthread...hreadid=244205

Or was it this one:

http://www.antionline.com/showthread...hreadid=243599 ?

You guys should read this document at security focus:

Ten Windows Password Myths
by Mark Burnett
http://www.securityfocus.com/infocus/1554

If the system you use is case sensitive try a 7 character password with at least 1 number, 1 uppercase and 1 lower case.

The best password generator I ever had was my son. He's autistic. When he decided to become verbal he would string the wildest sylables together and he didn't seem to ever repeat.

Quote:

a brute force attack would even crack a password like 4bn9hi7u£$ but it would take a very long time

Not exactly. Depending on the OS (i.e. Windows :)), it may actually be *quicker* to crack a password that is longer than 7 characters. Sounds crazy, but it is true. The good folks at Foundstone have an excellent paper on this(and it appears in the Hacking Exposed series of books too).
To sum it up, a program like Lopht will split the hash into seven character blocks and crack them separately. This may speed it up because it would be like playing a game of Wheel of Fortune. You may be able to guess the password by seeing one of the other blocks cracked. This is a weakness in the LANMAN hash implementation originally developed by IBM. Send your complaints to the boys in blue.

Quote:

Originally posted here by thehorse13

Not exactly. Depending on the OS (i.e. Windows :)), it may actually be *quicker* to crack a password that is longer than 7 characters. Sounds crazy, but it is true. The good folks at Foundstone have an excellent paper on this(and it appears in the Hacking Exposed series of books too).
To sum it up, a program like Lopht will split the hash into seven character blocks and crack them separately. This may speed it up because it would be like playing a game of Wheel of Fortune. You may be able to guess the password by seeing one of the other blocks cracked. This is a weakness in the LANMAN hash implementation originally developed by IBM. Send your complaints to the boys in blue.

True, but it only works on LANMAN hashes (which is deprecated), not, on NTLM and NTLMv2 (and even less kerberos)... And yes, lanman hashes are still computed and stored by default in the SAM even on W2k and XP but it is possible to disable the generation of these (don't remember the exact reg key, but it is possible...)

Ammo

Quote:

And yes, lanman hashes are still computed and stored by default in the SAM even on W2k and XP but it is possible to disable the generation of these (don't remember the exact reg key, but it is possible...)

Yep, indeed this is true. Just pointing it out because I see this enabled on 95% of the machines I look at. :p

Here is the regkey:

Function Do Not Send LanMan Password
Hive HKEY_LOCAL_MACHINE
Key \System\CurrentControlSet\Control\Lsa
Value LMCompatibilityLevel
Type REG_DWORD
Data 0-5
Benefit This parameter specifies the type of authentication to be used when an NT client is authenticating to another machine. Setting this value to 4 or 5 may prevent Win9x clients from accessing server resources.
Level 0 Send LM response and NTLM response; never use NTLMv2 session security (default).
Level 1 Use NTLMv2 session security if negotiated
Level 2 Send NTLM authenication only. Never send LM authentication.
Level 3 Send NTLMv2 authentication only.
Level 4 DC refuses LM authentication.
Level 5 DC refuses LM and NTLM authentication (accepts only NTLMv2).