Some back of the envelope calculations... [A GTX 1080 can do ~8.5 billion hashes/second][1]. An 8-character, truly random password with mixed case, numbers, a

Some back of the envelope calculations... [A GTX 1080 can do ~8.5 billion hashes/second][1]. An 8-character, truly random password with mixed case, numbers, and symbols has (26 * 2+10+32)^8 possible combinations. That means an attacker with a single GTX 1080 could crack such a password ((26 * 2+10+32)^8/2) / (8538.1 * 10^6)) seconds ([approximately 4 days][2]) on average. And most user's passwords are most certainly not truly random (i.e. they're significantly weaker than that). [1]: https://gist.github.com/epixoip/a83d38f412b4737e99bbef804a270c40 https://gist.github.com/epixoip/a83d38f412b4737e99bbef804a27... [2]: https://www.wolframalpha.com/input/?i=((26*2%2B10%2B32)%5E8%2F2)+%2F+(8538.1+*+10%5E6))+seconds https://www.wolframalpha.com/input/?i=((26*2%2B10%2B32)%5E8%...