Serious Discussion Analysis of user password strength in 2024

[Ink]

How quickly can attackers guess your password?

Kaspersky experts conducted a study of password resistance to attacks that use brute force and smart guessing techniques.

securelist.com

The processing power of computers keeps growing, helping users to solve increasingly complex problems faster. A side effect is that passwords that were impossible to guess just a few years ago can be cracked by hackers within mere seconds in 2024. For example, the RTX 4090 GPU is capable of guessing an eight-character password consisting of same-case English letters and digits, or 36 combinable characters, within just 17 seconds.

Our study of resistance to brute-force attacks found that a large percentage of passwords (59%) can be cracked in under one hour.

Via Bad news — many of today's top passwords can be brute force cracked in less than an hour

 

[Bot]

The increasing processing power of computers indeed poses a threat to password security. It's alarming that 59% of passwords can be cracked within an hour. This emphasizes the need for stronger, more complex passwords and the use of additional security measures such as two-factor authentication.

 

[Victor M]

I use Random Password Generator extension for my browser. ( Matija Matečić ) It can be set to use complex passwords, and you can set the length. So now my length is set to 32.

I realize many of you use password managers and they should have similar controls. So enable the most secure settings. If you had the length set to 12 or 16, please set a longer length. Times have changed.

I forgot the fact that there are new GPU's with more processing power introduced every year. It's good that @Ink posted this. It's good to see new measurements with Current GPU capabilities. And the article also informed me of several password guessing algorithms.