hh.sePublications
Change search
CiteExportLink to record
Permanent link

Direct link
Cite
Citation style
  • apa
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • Other style
More styles
Language
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Other locale
More languages
Output format
  • html
  • text
  • asciidoc
  • rtf
Swedish Password Cracking with PassGAN: Generating Tailored Swedish Dictionaries for Offline Cracking
Halmstad University, School of Information Technology.
Halmstad University, School of Information Technology.
2025 (English)Independent thesis Advanced level (degree of Master (One Year)), 10 credits / 15 HE creditsStudent thesis
Abstract [en]

Passwords are still the most common form of authentication usedtoday [1]. Most computers and mobile phones available today offerbuilt-in encryption and password protection for storage [2][3]. Passwordcracking plays a significant role in digital forensic investigations.The efficiency of cracking passwords is affected by the password listschosen and can be extremely difficult at times [4]. However, people oftenchoose easy-to-remember passwords that are easy to guess. Usersalso tend to use personal information when creating their passwords,which can be exploited [5]. This study focuses on generating tailoredand customized word lists using PassGAN [6] to improve passwordcracking for Swedish users. We also analyzed patterns, trends, andcontextual information of a collection of Swedish password leaks.Our analysis of 5.8 million Swedish password leaks revealed thatusers tend to opt for simple passwords over long, complex ones,which are often easier to remember. The average password length isapproximately 9.03 characters. When creating passwords, users tendedto either use a combination of letters and numbers or only letters. Thetop passwords were all weak passwords that are easy to guess, suchas "123456" or "hejsan". Swedish-exclusive characters (å, ä ,ö) onlyoccurred around 17,000 times, capitalized or not.Our newly generated password dictionary using PassGAN outperformedrockyou.txt, the well-known password dictionary. Merginglocal elements such as names and expressions with real-life passwordleaks contributed to enhancing the model’s performance in predictingand generating realistic passwords.

Place, publisher, year, edition, pages
2025. , p. 56
Keywords [en]
Password Cracking; Password List; Machine learning; Swedish word-list; PassGAN; Password Analysis;
National Category
Information Systems
Identifiers
URN: urn:nbn:se:hh:diva-57443OAI: oai:DiVA.org:hh-57443DiVA, id: diva2:2002224
Subject / course
Digital Forensics
Educational program
Master's Programme in Network Forensics, 60 credits
Presentation
2025-09-26, Högskolan i Halmstad, Halmstad, 09:05 (English)
Supervisors
Examiners
Available from: 2025-09-30 Created: 2025-09-30 Last updated: 2025-10-01Bibliographically approved

Open Access in DiVA

fulltext(1573 kB)302 downloads
File information
File name FULLTEXT02.pdfFile size 1573 kBChecksum SHA-512
6cddf29bb5d991bc65853c56b721016c05c440ad556be0ea447694b24d45522e68a0e94c0c80b2d54835bb03d9ab56a9e4832d0ec4a009ad9d9e7c10b7ad98af
Type fulltextMimetype application/pdf

By organisation
School of Information Technology
Information Systems

Search outside of DiVA

GoogleGoogle Scholar
Total: 304 downloads
The number of downloads is the sum of all downloads of full texts. It may include eg previous versions that are now no longer available

urn-nbn

Altmetric score

urn-nbn
Total: 2476 hits
CiteExportLink to record
Permanent link

Direct link
Cite
Citation style
  • apa
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • Other style
More styles
Language
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Other locale
More languages
Output format
  • html
  • text
  • asciidoc
  • rtf