Glossary: Identity and Access Management

breached password list

Also written: breach list, breached.txt, breached passwords

A list of passwords already seen in data breaches, which attackers try first. NIST says to reject any new password found on it; it catches weak passwords such as `correcthorsebatterystaple` that pass every length and word rule.