It's not necessarily so clear cut. Without evidence directly linking the cracking to a specific password, the conversation is circumstantial. There often isn't

It's not necessarily so clear cut. Without evidence directly linking the cracking to a specific password, the conversation is circumstantial. There often isn't enough direct evidence to be 100% sure of a conviction, so circumstantial evidence is often accepted to get to the threshold of "beyond a reasonable doubt". https://en.wikipedia.org/wiki/Circumstantial_evidence https://en.wikipedia.org/wiki/Circumstantial_evidence