<commit_before><h1>CrackStation's Password Cracking Dictionary</h1>

<p>
I am releasing CrackStation's main password cracking dictionary (1,493,677,782
words, 15GB) for download.
</p>

<h2>What's in the list?</h2>

<p>
The list contains every wordlist, dictionary, and password database leak that
I could find on the internet (and I spent a LOT of time looking). It also
contains every word in the Wikipedia databases (pages-articles, retrieved 2010,
all languages) as well as lots of books from <a
href="http://www.gutenberg.org/">Project Gutenberg</a>. It also includes the
passwords from some low-profile database breaches that were being sold in the
underground years ago.
</p>

<p>
The format of the list is a standard text file sorted in non-case-sensitive
alphabetical order. Lines are separated with a newline "\n" character.
</p>

<p>
You can test the list without downloading it by giving SHA256 hashes to the <a
href="/">free hash cracker</a> or to <a href="https://twitter.com/plzcrack">@PlzCrack</a> on twitter. Here's a <a
href="https://defuse.ca/checksums.htm"> tool for computing hashes easily</a>.
Here are the results of cracking <a
href="https://defuse.ca/blog/cracking-linkedin-hashes-with-crackstation">LinkedIn's</a>
and <a
href="https://defuse.ca/blog/cracking-eharmonys-unsalted-hashes-with-crackstation">
eHarmony's</a> password hash leaks with the list. 
</p>

<p>
The list is responsible for
cracking about 30% of all hashes given to CrackStation's free hash cracker, but
that figure should be taken with a grain of salt because some people try hashes
of really weak passwords just to test the service, and others try to crack their
hashes with other online hash crackers before finding CrackStation. Using the
list, we were able to crack 49.98% of one customer's set of 373,000
human password hashes to motivate their move to a better salting scheme.
</p>

<h2>Step 1: Pay what you want.</h2>

<p>
The wordlist is being sold using a "pay what you want" model. That means
you can pay absolutely any amount of money you want for the wordlist. Even
nothing. Use the PayPal donate button, Bitcoin address, or Litecoin address
below to make your payment.
</p>

<p>
<strong>How much should I pay?</strong>
</p>

<p>
Think about the following points when deciding how much to pay:
</p>

<ul>
    <li>
        If I wasn't doing a "pay what want" I would set the price at
        $5.
    </li>
    <li>
        The money will be used for security research and development projects.
    </li>
    <li>
        It took about 2 to 3 weeks of full-time work to make this dictionary
        (searching, downloading, scripting, processing).
    </li>
    <li>
        I will not be offended by small payments.
    </li>
    <li>
        If you really have no money, consider sharing this page with one
        interested person to be the equivalent of paying $1.00.
    </li>
</ul>

<br /><commit_msg>Change alternate payment text.<commit_after><h1>CrackStation's Password Cracking Dictionary</h1>

<p>
I am releasing CrackStation's main password cracking dictionary (1,493,677,782
words, 15GB) for download.
</p>

<h2>What's in the list?</h2>

<p>
The list contains every wordlist, dictionary, and password database leak that
I could find on the internet (and I spent a LOT of time looking). It also
contains every word in the Wikipedia databases (pages-articles, retrieved 2010,
all languages) as well as lots of books from <a
href="http://www.gutenberg.org/">Project Gutenberg</a>. It also includes the
passwords from some low-profile database breaches that were being sold in the
underground years ago.
</p>

<p>
The format of the list is a standard text file sorted in non-case-sensitive
alphabetical order. Lines are separated with a newline "\n" character.
</p>

<p>
You can test the list without downloading it by giving SHA256 hashes to the <a
href="/">free hash cracker</a> or to <a href="https://twitter.com/plzcrack">@PlzCrack</a> on twitter. Here's a <a
href="https://defuse.ca/checksums.htm"> tool for computing hashes easily</a>.
Here are the results of cracking <a
href="https://defuse.ca/blog/cracking-linkedin-hashes-with-crackstation">LinkedIn's</a>
and <a
href="https://defuse.ca/blog/cracking-eharmonys-unsalted-hashes-with-crackstation">
eHarmony's</a> password hash leaks with the list. 
</p>

<p>
The list is responsible for
cracking about 30% of all hashes given to CrackStation's free hash cracker, but
that figure should be taken with a grain of salt because some people try hashes
of really weak passwords just to test the service, and others try to crack their
hashes with other online hash crackers before finding CrackStation. Using the
list, we were able to crack 49.98% of one customer's set of 373,000
human password hashes to motivate their move to a better salting scheme.
</p>

<h2>Step 1: Pay what you want.</h2>

<p>
The wordlist is being sold using a "pay what you want" model. That means
you can pay absolutely any amount of money you want for the wordlist. Even
nothing. Use the PayPal donate button, Bitcoin address, or Litecoin address
below to make your payment.
</p>

<p>
<strong>How much should I pay?</strong>
</p>

<p>
Think about the following points when deciding how much to pay:
</p>

<ul>
    <li>
        If I wasn't doing a "pay what want" I would set the price at
        $5.
    </li>
    <li>
        The money will be used for open source security research and development projects.
    </li>
    <li>
        It took about 3 weeks of full-time work to make this dictionary
        (searching, downloading, scripting, processing).
    </li>
    <li>
        I will not be offended by small payments.
    </li>
    <li>
        If you have no money or don't want to pay, seeding the torrents and
        sharing this page with your friends is appreciated!
    </li>
</ul>

<br />
{'fraction_non_alphanumeric': 0.0895573406255341, 'fraction_numerical': 0.014356520252948214, 'mean_word_length': 3.7041800643086815, 'pattern_counts': {'":': 0, '<': 101, '<?xml version=': 0, '>': 101, 'https://': 8, 'lorem ipsum': 0, 'www.': 2, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 6, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
{'dir': 'git-commits-cleaned', 'id': '255108', 'n_tokens_mistral': 1851, 'n_tokens_neox': 1723, 'n_words': 834}