4 ms·
Nearly everything you've ever heard about "strong passwords" is irrelevant and obsolete when the cracking method is simply "hash every alphanumeric and punctuat
by JulianMorrison 6y ago
Nearly everything you've ever heard about "strong passwords" is irrelevant and obsolete when the cracking method is simply "hash every alphanumeric and punctuation string starting at MIN_LENGTH and incrementing". The only way to defeat this is by making the hash computation expensive.
- AnthonyMouse 6y agoMaking the hash computation expensive does nothing when your password is "Password1" because it will be cracked in seconds even using an expensive hash algorithm. Making the hash computation inexpensive does very little (and has other costs) when your password is "Tgu8dVThkweVqa6P" because that has enough entropy to require in excess of $100,000 in electricity to brute force even with a fast hash algorithm, which is uneconomical in ordinary situations.