
A combolist is a text file which lists out usernames and passwords in a machine-readable format. The file is used as an input for an account-checker tool that can automate authentication requests to a website, online service provider, or application programming interface (API). Combolists are often created following an online data breach and packaged and sold by hackers to other malicious actors.