On Friday, members of the CynoSure Prime password-cracking collective published the top 100 mostly commonly used Ashley Madison passwords recovered so far. With top entries including 123456, 12345, and password, the list underscored that accounts on the site dedicated to people cheating on their romantic partners were no better than those on LinkedIn and more above-ground sites.

Now CynoSure Prime members are back with a new list highlighting some of the most entertaining passwords found so far among the 11.7 million cracked accounts. With entries including goodguydoingthewrongthing, ishouldnotbedoingthis, thisiswrong, and whatthehellamidoing, the list suggests some of the people felt guilty about setting up accounts on the site, or at least feigned feeling guilty. Others demonstrated just how oblivious many users were to the weakness of their own passwords. Examples include passcodes such as thisisagoodpassword, thebestpasswordever, superhardpassword, and mypasswordispassword.

For what little it's probably worth, the people who ultimately picked the first class of passwords seem to have some ambivalence about what they're doing. People behind the second seemed to think that adding a few extra words somehow made the passcodes harder to guess. But as Ars chronicled in the 2013 feature How the Bible and YouTube are fueling the next frontier of password cracking , even passwords with 36 or more characters are easy fodder for crackers. The lack of capital letters, numbers or special characters made the passphrases especially susceptible, although many of them are so predictable that even a sprinkling of numbers or capital letters couldn't save them.

The new list is found in a blog post CynoSure Prime members published Friday. The entries include only passwords belonging to a 15.26 million subset of the 36 million cryptographically protected passwords leaked last month. The shortest password recovered so far had a character length of just one, while the longest had 28 characters. The vast majority were either all lower-case letters or lower-case letters with numbers. In either case, the limited number of possible combinations made them especially vulnerable to cracking.

Another cracking exercise showed that 630,000 accounts were protected by a password that was identical to the username.

The following graphs measuring the character sets and character lengths of the recovered passwords offer another glimpse at the collective weakness of the recovered passwords:

As mentioned earlier in this post, the new analysis is also interesting for betraying the mindset of the people choosing the passwords. As CynoSure Prime members wrote in Friday's blog post:

Rather than bore everyone with the standard top 10/50/100 lists, one of our members has kindly put together a top interesting passwords classified by various categories purely for your entertainment. Those that think adding a few more words to the word password makes it harder to crack:

mypasswordispassword

superhardpassword

thebestpasswordever

thisisagoodpassword Those that are having doubts about using the site:

ishouldnotbedoingthis

ithinkilovemywife

thisiswrong

whatthehellamidoing

whyareyoudoingthis

cheatersneverprosper

donteventhinkaboutit

isthisreallyhappening Those that are in denial:

likeimreallygoingtocheat

justcheckingitout

justtryingthisout

goodguydoingthewrongthing Those who think this is a dating site:

lookingfornewlife

friendswithbenefits Those who trusted AM: youwillneverfindout

youwillnevergetthis

secretissafewithme Passwords from xkcd (https:/xkcd.com/936/)

batteryhorsestaple

correcthorsebatterystaple Those that might have figured out what AM is doing: nothingfound

theywererobots

nobodyhere Other funnies:

everynameitriedwastaken

allthegoodpasswordshavegone

lickemlikeshelikesit

lildickinyourpussyn0w

satisfactionwithlicking

blackfromthewaistdown

smalldickbuthardworker

Even if many of the cracked accounts belonged to automated bots, the passwords protecting them still were ultimately chosen by a human being. Either way, many of the recovered passwords betray the guilt, naiveté, and brazenness of many of these people, as they either cheated on their romantic partners or on people hoping to use the site for a clandestine affair.