500 Million PWND Passwords

[Prophet]

Article about a collection of known used passwords. Includes link and torrent for downloading the whole list.

https://www.troyhunt.com/ive-just-launc ... version-2/

This link will search the list for you for any passwords you enter and tell you how many times it has been found in the wild as part of password lists.

https://haveibeenpwned.com/Passwords

[Paladin]

HAHAH yeah right... let me go onto a strange website and type in a password so they can now have a record of it. i i

I KNOW none of my memorized passwords on on it. I don't use ones with easy to put together words. I memorized random shit all strung together. i i
Most of my other passwords are generated by lastpass so are truly random characters that I don't even remember.

Also for my extremely important ones I use password1234, no one will guess that. i i

[Docjon]

HAHAH yeah right... let me go onto a strange website and type in a password so they can now have a record of it. i i

I KNOW none of my memorized passwords on on it. I don't use ones with easy to put together words. I memorized random shit all strung together. i i
Most of my other passwords are generated by lastpass so are truly random characters that I don't even remember.

Also for my extremely important ones I use password1234, no one will guess that. i i

It occurred to me also that this would be an EXCELLENT honeypot to gather common passwords.

[Prophet]

There is a link in the article for the full list of passwords to check it manually. Both sites are security vetted as well. They have been around a LONG time and part of the regular computer security circles.

[Prophet]

Hak5 even covered it on Threatwire.

   

phpBB [media]

       

-=SOURCE=-

[Prophet]

They also talk about it on Level1Tech in an article from Ars that will hash part of your password and return all passwords that have the same first five letters on the list.

   

phpBB [media]

       

-=SOURCE=-

https://arstechnica.com/information-tec ... passwords/

[Paladin]

That is cool man. Thanks for the info, that is indeed interesting.
I myself have zero reason to ever use that, or care, but it is interesting I suppose.

[Docjon]

There is a link in the article for the full list of passwords to check it manually. Both sites are security vetted as well. They have been around a LONG time and part of the regular computer security circles.

I didn't actually think they WERE gathering them, but I thought that was a good way to get them. I place more trust in the things you post than the stuff I personally research any more. My mind's too scrambled - my think-box doesn't brain right. Plus, I know you take your security seriously.

[Lexx]

Thanks Mate. I actually found one in that list.

[Paladin]

Thanks Mate. I actually found one in that list.

So it only checks he first 5 characters according to the beginning of that video?
That is not many to compare to, a lot of passwords may share that.

Someone grab the file. It may be fun to search that. i i

[Prophet]

Depends on the link you follow. The one I listed pulls your exact password and how many know instances of it exist. The one talked about in Ars will pull ALL passwords from tye list that have the same first five letters.


Example Enter - ABCDE and you get all passwords that start with ABCDE on the list. You can then see if your full password matches any that are returned.