Given that a four word password should have around 44 bits of entropy (according to the correct horse battery staple XKCD), that should take 2^44 hashes to exha

Given that a four word password should have around 44 bits of entropy (according to the correct horse battery staple XKCD), that should take 2^44 hashes to exhaust, or 2^43 hashes to have a 50% chance of getting the password. 2^43 hashes / (1000 hashes per second) are about ~280 years. That's a big "+".