4 ms·

Perhaps they obtained the hashes, then tried bruteforcing them, and only published the ones that they actually found.

• yen223 12y ago
  Doubt it, there's some non-dictionary-word passwords on the list.
  • mehwoot 12y ago
    Mostly short ones though.