A really good password with a really good hash takes more time for values of time exceeding far exceeding any human's lifespan. Assuming a 10-character random

A really good password with a really good hash takes more time for values of time exceeding far exceeding any human's lifespan. Assuming a 10-character random alphanumeric, that'd be 62¹⁰ possibilities (26 uppercase + 26 lowercase + 10 numbers = 62). Even given an insanely fast brcypt of 1µs, that's over thirteen thousand years to get to a 50% chance. Now, if your hash is a bad one, say MD5, then you're in trouble. GPUs could brute force that ten-character password within a year.