Knowledge

Updated meta-password collection "RockYou" published containing 10 billion credentials

Take action: The passwords have already leaked. You can't do anything about that. But it's high time to enable 2FA on all accounts to add an extra layer of security, and use a password manager to generate random passwords (so even if a password is leaked it's not the same as any of your other passwords.


Learn More

A monumental list of credentials collected over years of various data breachies has been updated and published. The list is known as RockYou, previously published in 2021. 

To be very clear - the list is NOT a brand new data breach. The file includes the 8.4 billion passwords from the RockYou 2021 file, along with an additional 1.5 billion passwords collected from data breaches between 2021 and 2024.

The file was published on the BreachForums discussion forum. A user with the screenname ObamaCare shared a plaintext file named "rockyou2024.txt," containing 9,948,575,739 unique passwords.

The risk of this new leak is the amount of aggregated data available for attackers to start testing against targets, since many users will have a whole history of passwords across many platforms.

Updated meta-password collection "RockYou" published containing 10 billion credentials