That is now how passwords are cracked in today's environment. In today's environment, someone obtains (via hacking or bribes) the internal password hash list,

That is now how passwords are cracked in today's environment. In today's environment, someone obtains (via hacking or bribes) the internal password hash list, and then runs the list through a system such as this one: https://gist.github.com/epixoip/a83d38f412b4737e99bbef804a270c40 https://gist.github.com/epixoip/a83d38f412b4737e99bbef804a27... A captcha on the login page does nothing to slow this monster down.