To construct a representative Arabic password list, data was aggregated from regional leaks (e.g., Middle Eastern bank datasets) and public repositories. Categories of Arabic Passwords Pure Numeric Patterns : Dominate regional lists. In Saudi Arabia, are the most frequent. Religious and Cultural Phrases : Common terms such as "bismillah"
Hackers craft phishing emails in Arabic that trick users into revealing their passwords. Once a few real passwords are collected, they expand their by reversing the hash (if weak hashing is used).
Possessing or deploying such lists against accounts you do not own, or without explicit written permission from the system owner, violates laws including the UAE Cybercrime Law (Federal Decree-Law No. 34/2021), Saudi Arabia's Anti-Cyber Crime Law, and international statutes (CFAA in the US, Computer Misuse Act in the UK).
This paper explores the unique composition of Arabic password lists, focusing on how linguistic features—specifically Modern Standard Arabic (MSA), dialectal variations, and "Franko-Arabic" (Romanized Arabic)—influence password security and susceptibility to dictionary attacks. 1. Abstract arabic password list
Many authentication systems are built for left-to-right (LTR) languages. When an Arabic password is entered, some poorly coded applications reverse the string or mishandle bidirectional text. Attackers exploit this by generating RTL password variations.
A properly managed Arabic password list is a defensive tool. It should only be used:
: The use of Latin characters and numbers to represent Arabic sounds (e.g., using "7" for or "3" for To construct a representative Arabic password list, data
| Rank | Arabic Password | Romanization | English Meaning | |------|----------------|--------------|------------------| | 1 | ١٢٣٤٥٦ | 123456 | 123456 (but in Arabic digits) | | 2 | كلمة | Kalima | "Word" or "Password" | | 3 | محمد | Mohammed | Common first name | | 4 | ٠١٢٣٤٥٦٧٨٩ | 0123456789 | Sequential digits | | 5 | مصر | Misr | Egypt | | 6 | شلاؤيث | Shalouth | Keyboard walk (right to left) | | 7 | جدة | Jeddah | City name | | 8 | الرياض | Ar-Riyadh | Capital city | | 9 | احمد | Ahmed | First name | | 10 | سر | Sirr | "Secret" | | 11 | ١٢٣٤٥ | 12345 | Short digit sequence | | 12 | علي | Ali | First name | | 13 | ١١١١١١ | 111111 | Repeating digit 1 | | 14 | خالد | Khalid | First name | | 15 | اسلام | Islam | Religion name | | 16 | ٢٢٢٢٢٢ | 222222 | Repeating digit 2 | | 17 | مريم | Mariam | Female name | | 18 | حب | Hob | "Love" | | 19 | عربي | Arabi | "Arabic" | | 20 | ١٢٣٤٥٦٧٨ | 12345678 | 8-digit sequence |
crunch 6 6 ٠١٢٣٤٥٦٧٨٩ -o arabic_digits.txt
: Popular first names and surnames across different dialects (Egyptian, Gulf, Levantine, Maghrebi). Keyboard Patterns : Religious and Cultural Phrases : Common terms such
Hackers use these localized lists to perform "dictionary attacks" or "brute-force attacks." Standard global lists like the NordPass Top 200 might miss culturally specific passwords, but regional lists allow attackers to target Arabic-speaking users with much higher success rates. The Risk of Using Common Arabic Passwords
By taking the time to create strong and unique passwords using an Arabic password list, you can help protect your online identity and ensure that your passwords are secure.