Topics / #password

Password projects on GitHub

Password managers, generators and credential security tools.

As of , the most-starred Password projects on GitHub are SecLists (74.2K stars), keepassxc (29.3K stars) and hashcat (27K stars). GitHub.Locker tracks 12 Password repositories with 264.6K stars combined. The fastest-growing on October 16 was SecLists, with +18 stars in a day.

12Projects
264.6KStars in total
+59Stars in a day
Browse in the catalog →github.com/topics/password ↗

Hot right now

Most stars gained in a day · Oct 16

+18

SecLists

danielmiessler/SecLists · ★ 74.2K

SecLists is a huge collection of ready-made wordlists for security testing: usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells and more, all gathered in one repository.

+17

keepassxc

keepassxreboot/keepassxc · ★ 29.3K

KeePassXC is a modern, secure, open-source password manager for Windows, macOS, and Linux. It keeps usernames, passwords, URLs, attachments, and notes in one offline, encrypted database file.

+9

nodewarden

shuaiplus/nodewarden · ★ 3.9K

NodeWarden is a self-hosted, Bitwarden-compatible password manager server that runs entirely on Cloudflare Workers, letting you sync vaults, attachments and TOTP codes with standard Bitwarden clients without renting a VPS.

+8

hashcat

hashcat/hashcat · ★ 27K

hashcat is a highly optimized password recovery platform: you feed it password hashes and it recovers the passwords behind them, billed as the world's fastest password cracker.

The all-time top

12 projects · by stars

  1. #1 · danielmiessler/SecLists

    SecLists

    SecLists is a huge collection of ready-made wordlists for security testing: usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells and more, all gathered in one repository.

    74.2K
  2. #2 · keepassxreboot/keepassxc

    keepassxc

    KeePassXC is a modern, secure, open-source password manager for Windows, macOS, and Linux. It keeps usernames, passwords, URLs, attachments, and notes in one offline, encrypted database file.

    29.3K
  3. #3 · hashcat/hashcat

    hashcat

    hashcat is a highly optimized password recovery platform: you feed it password hashes and it recovers the passwords behind them, billed as the world's fastest password cracker.

    27K
  1. 4

    devise

    24.4Kheartcombo/devise · Ruby

    Devise is a flexible, modular authentication solution for Ruby on Rails, built on top of Warden. It covers sign-up, sign-in, password recovery and more through optional modules you enable per model.

  2. 5

    mimikatz

    21.9Kgentilkiwi/mimikatz · C

    A small Windows security tool, originally written to learn C. It is best known for extracting plaintext passwords, hashes, PIN codes and Kerberos tickets from memory, and can perform pass-the-hash, pass-the-ticket or build Golden tickets.

  3. 6

    zxcvbn

    16.1Kdropbox/zxcvbn · CoffeeScript

    zxcvbn is an open-source JavaScript password strength estimator from Dropbox, inspired by password crackers. Instead of checking rules, it rates how guessable a password is through pattern matching and adds short verbal feedback.

  4. 7

    supertokens-core

    15.3Ksupertokens/supertokens-core · Java

    SuperTokens is an open-source auth provider for adding secure login and session management to your apps — an open-core alternative to proprietary providers like Auth0, Firebase Auth and AWS Cognito.

  5. 8

    logto

    14.7Klogto-io/logto · TypeScript

    Logto is open-source authentication and authorization infrastructure for SaaS and AI apps — a server that handles sign-in, identity, and access control for you, built on OIDC, OAuth 2.1, and SAML.

  6. 9

    john

    13.8Kopenwall/john · C

    A fast, offline password cracker. Its primary purpose is detecting weak Unix passwords, but the jumbo build supports hundreds of hash and cipher types and runs on Unix, macOS, Windows and more.

  7. 10

    keeweb

    13Kkeeweb/keeweb · HTML

    KeeWeb is a free, cross-platform password manager that opens and creates KeePass-compatible kdbx vault files, running as either a browser app or a desktop app.

  8. 11

    LaZagne

    11KAlessandroZ/LaZagne · Python

    LaZagne is an open-source tool that retrieves passwords stored locally on a computer by reverse-engineering the storage method of each software (plaintext, APIs, custom algorithms, databases, etc.).

  9. 12

    nodewarden

    3.9Kshuaiplus/nodewarden · TypeScript

    NodeWarden is a self-hosted, Bitwarden-compatible password manager server that runs entirely on Cloudflare Workers, letting you sync vaults, attachments and TOTP codes with standard Bitwarden clients without renting a VPS.

Often tagged together