How Many Seconds Would It Take To Crack Your Password?

DillyTonto writes "Want to know how strong your password is? Count the number of characters and the type and calculate it yourself. Steve Gibson's Interactive Brute Force Password Search Space Calculator shows how dramatically the time-to-crack lengthens with every additional character in your password, especially if one of them is a symbol rather than a letter or number. Worst-case scenario with almost unlimited computing power for brute-forcing the decrypt: 6 alphanumeric characters takes 0.0000224 seconds to crack, 10 alpha/nums with a symbol takes 2.83 weeks."

Huh.

[Anonymous Coward]

I wonder if he's caching every string entered into a dictionary file...

Ha!

[2.7182]

That's silly. I just use my SS#. That has a LOT of digits. Who is going to guess that?

Re:Ha!

[agentgonzo]

"SS#" is a rubbish password with just three characters. It takes only 0.00000209 seconds to crack it according to the tool.

Has anyone actually doublechecked his security?

[Bananatree3]

Not to be suspicious, but "doublecheck you password strength! Just enter your passwords below...." even from a relatively trusted source is a little tough to trust....

Re:Ha!

[flyingfsck]

The USA/Canada SS is a bit short, but using a credit card number as a password would be much better. It is pre-printed on a sturdy piece of plastic, always handy in your wallet and you can easily get a new one by telling your bank that some dodgy web shop got compromized...

Re:Almost Unlimited?

[TwentyCharsIsNotEnou]

If the computing power was "almost unlimited" you could crack any password you want since it is essentially unbounded in its parallelism.

Well, almost any password.

Re:Websites

[Gideon Wells]

My one bank does that. It irks me to no end. Kind of like an unmatched (.

Re:Websites

[SJHillman]

)

You're gonna break stuff if you keep leaving unmatched (

Re:Ha!

[TeknoHog]

"my SS#" my #ss.

Re:Websites

[Anonymous Coward]

)

Fucker.

Re:Link

[Sarten-X]

Link in link form. [grc.com]

Re:Ha!

[ciderbrew]

You had your #ss cracked ages ago...



really no need for that :)

Re:Ha!

[rolfwind]

Really? Mine takes much longer than that. You should post it. Don't worry, it will appear as ***-**-*** on our screens just like mine did on yours just now. I just want to copy and paste it in the Steve Gibson's Interactive Brute Force Password Search Space Calculator to verify what you said.

Re:Websites

[kahless62003]

c-c-c-combo breaker!)

Post-it

[jmccue]

Well I entered in "Go to my office and look at the post-it on my terminal" and it said that will take "4.97 hundred billion trillion trillion trillion trillion trillion trillion centuries"

Microsoft...

[Anonymous Coward]

While this is true, Microsoft only uses the first 8 characters.
So long passwords are pointless on Microsoft products.

CAPTCHA = pictures

Re:Ha!

[Anonymous Coward]

hunter2

Re:Ha!

[Anonymous Coward]

Mine you will never guess:

password' ; EXEC sp_MSforeachtable @command1 = "DROP TABLE ?"; --

Password checker?

[Scutter]

Soooooo....enter your password into this completely legitimate and not-at-all-a-harvesting-tool password checker and we'll tell you if it's secure?

Ima get right on that.

Re:Huh.

[chill]

Mine is huge but then again I found an easy way to get a huge password...anybody seen how big the serial is on your average bass? Its got uppercase, lowercase, numbers and symbols and its pretty long and since I know my babies and never sell them its a pretty easy set of long passwords to keep up with.

If I ever catch a bass with a serial number, I'll give up fishing. Do you work in some genetics testing lab or something?

Re:Ha!

[TeknoHog]

So that's why you call it the pound sign.

Re:Websites

[phantomfive]

Whatever, fix this )