Analized 91% of passwords from various dumps + collections that were dumped on January, 2019
NOTE: Statistics below is relative to the number of analyzed passwords, not total number of passwords
[*] Length:
[+] 8: 26% (786701337)
[+] 6: 18% (551921261)
[+] 7: 14% (432767326)
[+] 9: 14% (419790051)
[+] 10: 13% (390870784)
[+] 11: 05% (165058697)
[+] 12: 03% (116372280)
[+] 13: 02% (67130959)
[+] 14: 01% (48538617)
Percentage
occurance, %
+
|
30|
29|
28|
27|
26| +-+
25| | |
24| | |
23| | |
22| | |
21| | |
20| | |
19| | |
18| +-+ | |
17| | | | |
16| | | | |
15| | | | |
14| | | +-+ | | +-+
13| | | | | | | | | +-+
12| | | | | | | | | | |
11| | | | | | | | | | |
10| | | | | | | | | | |
9| | | | | | | | | | |
8| | | | | | | | | | |
7| | | | | | | | | | |
6| | | | | | | | | | |
5| | | | | | | | | | | +-+
4| | | | | | | | | | | | |
3| | | | | | | | | | | | | +-+
2| | | | | | | | | | | | | | | +-+
1| | | | | | | | | | | | | | | | | +-+
0+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+----------+
6 7 8 9 10 11 12 13 14
Character Length
[*] Character-set:
[+] loweralphanum: 44% (1334264778)
[+] loweralpha: 24% (716443890)
[+] numeric: 15% (475266015)
[+] mixedalphanum: 05% (177042874)
[+] loweralphaspecialnum: 02% (59629370)
[+] mixedalpha: 01% (54270065)
[+] loweralphaspecial: 01% (53137637)
[+] upperalphanum: 01% (48660372)
[*] Password complexity:
[+] digit: min(0) max(14)
[+] lower: min(0) max(14)
[+] upper: min(0) max(14)
[+] special: min(0) max(14)
[*] Simple Masks:
[+] stringdigit: 34% (1028427815)
[+] string: 26% (793559229)
[+] digit: 15% (475266015)
[+] othermask: 07% (209939368)
[+] digitstring: 06% (203889327)
[+] stringdigitstring: 04% (123168172)
[+] digitstringdigit: 01% (44508566)
[+] stringspecialstring: 01% (35827350)
[*] Advanced Masks:
[+] ?l?l?l?l?l?l?l?l: 07% (226985287)
[+] ?d?d?d?d?d?d: 06% (188259444)
[+] ?l?l?l?l?l?l: 05% (171402066)
[+] ?d?d?d?d?d?d?d?d: 04% (121909150)
[+] ?l?l?l?l?l?l?l: 03% (117641530)
[+] ?l?l?l?l?l?l?d?d: 02% (82121489)
[+] ?l?l?l?l?l?l?l?l?l: 02% (72849880)
[+] ?d?d?d?d?d?d?d: 02% (67706817)
[+] ?l?l?l?l?l?l?l?l?l?l: 02% (61508455)
[+] ?l?l?l?l?l?l?l?d: 01% (48404029)
[+] ?l?l?l?l?l?l?d: 01% (46903854)
[+] ?l?l?l?l?d?d?d?d: 01% (44111433)
[+] ?l?l?l?l?l?l?l?d?d: 01% (43896616)
[+] ?l?l?l?l?l?d?d: 01% (41036661)
[+] ?d?d?d?d?d?d?d?d?d: 01% (39223144)
[+] ?l?l?l?l?l?l?d?d?d: 01% (38063825)
[+] ?l?l?l?l?l?l?l?l?d?d: 01% (36396950)
[+] ?l?l?l?l?l?l?l?l?d: 01% (35710590)
[+] ?l?l?l?l?l?d?d?d?d: 01% (33673687)
[+] ?l?l?l?l?l?d?d?d: 01% (33457009)
[+] ?l?l?l?l?d?d: 01% (32617450)
[+] ?d?d?d?d?d?d?d?d?d?d: 01% (32453931)
[+] ?l?l?l?l?l?l?d?d?d?d: 01% (31393836)
[+] ?l?l?l?l?l?d: 01% (29886536)
- Mantas Sasnauskas - Lexcor