xato-net 10-million-passwords (full)
The full deduplicated xato.net 10-million-passwords corpus compiled by Mark Burnett, one of the most widely used real-world password wordlists. Ordered by frequency.
- Size
- 46.1 MB
- Category
- Passwords
- Source
- danielmiessler/SecLists
- License
- MIT
- Recommended tools
- hashcatjohnhydramedusa
Preview
This list is too large to copy or build in-browser — open or download it directly from the source.
123456 password 12345678 qwerty 123456789 12345 1234 111111 1234567 dragon 123123 baseball abc123 football monkey
The full deduplicated xato.net 10-million-passwords corpus compiled by Mark Burnett, one of the most widely used real-world password wordlists. Ordered by frequency.
This list is geared toward password cracking and credential attacks. At roughly 46.1 MB it pairs well with tools such as hashcat, john, hydra, medusa. It is large enough that streaming it straight from a high-throughput tool (rather than pasting it into a browser) is the practical way to use it.
Because of its size, this entry is link-only: preview the sample below to confirm it fits your target, then open or download the full list directly from its source on GitHub — your browser streams it without holding it in memory.
Sourced from danielmiessler/SecLists and distributed under MIT. Only use wordlists against systems you are explicitly authorized to test.