Given the dictionary (all possible words) and using the default settings (4 words, hyphen, 1 number). If we did something simple like say SHA-256 the generated

Given the dictionary (all possible words) and using the default settings (4 words, hyphen, 1 number). If we did something simple like say SHA-256 the generated password. And compare this to the SHA-256 of a captured password. It would take ~3 days, knowing the generation algorithm and dictionary to solve for a match. :.:.: Also nobody in their right mind would actually preform 1trillion HTTP post/get requests per second. They'd compare hashes locally within memory. Far faster.