How secure is your password? Who wins?!

[Jeff7]

Anywhere from 4 days to 4 octillion years.


Fun thing there - a password that's all the same character with the exception of one of them (55555555555555555a55555) or (___________k___________) is reasonably secure.

It definitely favors longer passwords though.

Make sure you put in your SSN too.

It isnt as secure as you think:

http://www.pcpro.co.uk/blogs/2011/0...-could-crack-your-password-in-under-a-second/

The results are startling. Working against NTLM login passwords, a password of “fjR8n” can be broken on the CPU in 24 seconds, at a rate of 9.8 million password guesses per second. On the GPU, it takes less than a second at a rate of 3.3 billion passwords per second"

I guess we didn't need to get all the way to quantum computers to make conventional security methods useless.

 

[JS80]

3 hours

 

[Gigantopithecus]

People should list their lengths and complexity.

This is off topic not love and relationships.

 

[lxskllr]

Hmmm... you are giving someone an ip address along with a string of charecters... I wonder what the super hacker behind it will do with it?

The guy who owns the site suggested he could make a cake with them :^D

 

[PottedMeat]

hmm
----------------------------------------- = instantly
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa = About 7 septendecillion years

 

[SMOGZINN]

0.047525504 seconds

 

[FallenHero]

It would take

About 22 septillion years

for a desktop PC to crack your password

 

[SMOGZINN]

Anywhere from 4 days to 4 octillion years.


Fun thing there - a password that's all the same character with the exception of one of them (55555555555555555a55555) or (___________k___________) is reasonably secure.

It definitely favors longer passwords though.

Right, I tried a password that was just the number 1 repeated 32 times and it tells me "About 12 quintillion years" all it seems that at least with long passwords length is much more important then content.

Hmmm... you are giving someone an ip address along with a string of charecters... I wonder what the super hacker behind it will do with it?

Maybe build a better hacker dictionary?

 

[olds]

About 127 octillion years

 

[vshah]

It would take
About 22 septillion years
for a desktop PC to crack your password

 

[yh125d]

9 days. Not bad for a password that only qualifies the bare minimum for many sites (8 characters, 1 capital and 1 letter minimum)

 

[vshah]

Make sure you put in your SSN too.

It isnt as secure as you think:

http://www.pcpro.co.uk/blogs/2011/0...-could-crack-your-password-in-under-a-second/

The results are startling. Working against NTLM login passwords, a password of “fjR8n” can be broken on the CPU in 24 seconds, at a rate of 9.8 million password guesses per second. On the GPU, it takes less than a second at a rate of 3.3 billion passwords per second"

what well designed system is going to respond to billions of password requests per second? most shut down after just a few incorrect tries.

 

[Nintendesert]

what well designed system is going to respond to billions of password requests per second? most shut down after just a few incorrect tries.

That's not how it's done. They get the hash and attempt to crack that not randomly putting passwords into a login server. Granted this can be very difficult with properly salted hashes and those not using outdated encryption methods and this is part of the problem with what happened to Sony. They didn't even do that much. It was stored in plain text.

All everyone is doing by putting real passwords into that website is building a better dictionary.

 

[JEDIYoda]

About 485 duodecillion years

 

[GoodRevrnd]

wow 10 days and i thought my pw was pretty good as there are no dictionary words. seems like length matters more than anything. "thisismypassword" takes 5mil years.

 

[lxskllr]

All everyone is doing by putting real passwords into that website is building a better dictionary.

As opposed to just making shit up like most people do with their passwords, and can be easily replicated by a computer?

 

[oppie1]

223 nonillion years to crack my wpa2 wifi password

 

[Turin39789]

Length is all that matters.

It claims

fartcanexhaustsarereallyfuckingloud

would take 4 decillion years. No caps or special characters!

 

[Turin39789]

mydumbcatischasingherowntail = 527 sextillion

 

[blackangst1]

I have two main passwords...one for general stuff (email, websites, etc) and one more complex for my Truecrypt partition.

Honestly, I dont feel secure typing my passwords on a non-encrypted site who's owner lives in the UK. So I dont have an answer

 

[Nintendesert]

As opposed to just making shit up like most people do with their passwords, and can be easily replicated by a computer?

Starting from a list of known used passwords is more valuable than starting off with random nonsense. There are some that are used over and over again by people, dictionaries start there. The whole 1qaz2wsx!QAZ@WSX shit is tried well before any random keyboard pounding because someone out there does have to remember it. People have patterns, even collectively. You all are helping create and establish a pattern that people can use to exploit.

 

[Merad]

Seriously, does no one know how to view source? It's a simple javascript calculation, running on your machine.

 

[FoBoT]

About 6 duodecillion years

 

[lxskllr]

Starting from a list of known used passwords is more valuable than starting off with random nonsense. There are some that are used over and over again by people, dictionaries start there. The whole 1qaz2wsx!QAZ@WSX shit is tried well before any random keyboard pounding because someone out there does have to remember it. People have patterns, even collectively. You all are helping create and establish a pattern that people can use to exploit.

You're grasping at straws. Assuming the site was harvesting passwords, they'd still have exactly nothing for the effort.

 

[silverpig]

Seriously, does no one know how to view source? It's a simple javascript calculation, running on your machine.

I was initially skeptical too until I figured this out too.

Of course I'm no internet pro so maybe some guy managed to figure out a way to get my password anyways, but it seems to me it all is run locally.