Name popularity differs by region.
While the Acordo Ortográfico (Spelling Agreement) tried to unify the language, habits die hard in passwords. portuguese password wordlist work
: A dedicated GitHub repository for Brazilian Portuguese words intended for penetration testing. Name popularity differs by region
Professionals rarely use wordlists completely raw.They apply custom rulesets to the Portuguese base words.For example, a Hashcat rule can automatically append the current year (e.g., passarinho2026 ) or capitalize the first letter ( Passarinho ), mimicking real user behavior. Sourcing and Generating Portuguese Wordlists Professionals rarely use wordlists completely raw
Tools like allow operators to generate wordlists using custom attributes.An operator can input common Portuguese words and define rules to systematically add common regional suffixes, prefixes, and leetspeak substitutions. Defensive Countermeasures
This is currently the gold standard for modern Portuguese cracking. It contains phrases specifically oriented toward Brazilian passphrases. It includes two specific Hashcat rule files (rule1 and rule2). These rules handle capitalization (Rule #1) and permutations, like swapping vowels or adding common suffixes. Combined, these rules turn the initial list into over 2.5 billion password permutations. The sources include dynamic pulls from the Portuguese Wiktionary and Wikipedia dumps as of May 2024.
: Localized lists emerged to capture the specific nuances of Brazilian Portuguese vs. European Portuguese, ensuring that common regionalisms were included. The Evolution: Contextual Permutations