Lists include physical patterns on the keyboard, such as asdfgh or zxcvbn . The "RockYou" List: A Famous Example
Most people believe that adding a capital letter or a number makes their password unique. However, modern wordlists are designed to account for these "human" variations: password words list
The content of these lists is a mirror of global culture and password habits. The most famous of these is likely the "Rockyou.txt" list, which originated from a massive 2009 data breach of a social media application. It contained 14 million unique passwords and became the gold standard for security researchers and hackers alike. When analyzing these lists, patterns emerge that are startlingly consistent: "123456," "password," "qwerty," and "iloveyou." Lists are often categorized by themes—sports teams, movie characters, pet names, and seasonal variations. Advanced lists, such as those provided by the open-source project SecLists, go a step further, including variations where common words have numbers appended (e.g., "Summer2023!") or where letters are swapped for their leetspeak equivalents (e.g., "p@ssw0rd"). Lists include physical patterns on the keyboard, such
Even if you add "fake complexity"—like changing "password" to P@ssw0rd123! —cracking software is programmed to predict these exact substitutions. The most famous of these is likely the "Rockyou
Have you ever had an account hacked because of a weak password? Share your story (anonymously) in the comments—it might help someone else avoid the same trap.