- Our list of common passwords, which is a collection of the most frequently used passwords across various platforms. The list is intended to help users avoid using easily guessable passwords and to promote better password security practices. So it can be uploaded and imported into the portal project.
- A script to generate a password list from the common passwords, which can be used to update or modify the existing password list in the portal project.
- The passwords should be all SHA1 hashed.
- Each line in the passwords list should contain a single password hash.
- The passwords can contain comments if needed, but they should be prefixed with a non HEX character (e.g.,
#).- Example:
A48EEA9EF657D73D99748628412320B4B5031AB7#corastone
- Example:
- The passwords list order is not important.
- The passwords list should not contain any duplicates.
- The password list must be saved in the
passwordsdirectory ascommon-passwords.txt.
🤖 How to generate a password list automatically - HaveIBeenPwned
-
Make sure you have
brewinstalled on your system. If you don't have it, you can install it by following the instructions at brew.sh. -
Make sure you have enough storage space available, as the script will download a large file (~55Gb) and process it. It will not re-download if
pwnedpasswords.txtwas not removed. -
Make sure you don't have resource-intensive applications running, as the script will download a large file and process it. It will not sort it if
pwnedpasswords_sorted.txtwas not removed. -
Run the
generate-passwords.shscript to download the latest passwords list from HaveIBeenPwned and generate a newcommon-passwords.txtfile with 1,000,000 most common passwords../generate-passwords.sh
-
Optionally you can pass the number of passwords you want to generate as an argument. For example, to generate 100,000 passwords:
./generate-passwords.sh 100000
✍️ How to generate a password list manually - HaveIBeenPwned Downloader
-
Install .NET SDK
brew install --cask dotnet-sdk
-
Install the PwnedPasswordsDownloader tool
dotnet tool install --global haveibeenpwned-downloader
-
Download the full passwords list (~55Gb), it will be saved as
pwnedpasswords.txtin the current directoryhaveibeenpwned-downloader
-
Sort the passwords list by frequency (descending order) and save it to
sorted.txt(This step will take a while and be resource-intensive on RAM and CPU)sort -t: -k2,2nr pwnedpasswords.txt > pwnedpasswords_sorted.txt -
Extract the top 1.000.000 passwords.
head -n 1000000 pwnedpasswords_sorted.txt > top_passwords.txt -
Remove the frequency column (optional, but recommended for consistency and reduced file size)
cut -d':' -f1 top_passwords.txt > top_passwords_hash_only.txt
-
Sort the passwords list by hash (optional, but recommended for consistency and may improve performance in some applications)
sort top_passwords_hash_only.txt > top_passwords_hash_only_sorted.txt -
Move it into the
passwordsdirectorymv top_plasswords_hash_only_sorted.txt passwords/common-passwords.txt