Access the official 10-million-password-list-top-10000.txt in the SecLists Common-Credentials Git hosted by Daniel Miessler.

These patterns highlight why simple password policies (e.g., "must be 8 characters") are often insufficient; users simply choose the easiest path, resulting in passwords that exist in the top 10,000 lists.

The Danger in Your Pocket: Analyzing the "10 Million Password List"