[OC] I updated our Password Table for 2024 with more data!
Posted by hivesystems
![[OC] I updated our Password Table for 2024 with more data!](https://www.byteseu.com/wp-content/uploads/2024/04/6k6n7qlla8wc1-1536x1536.png "[OC] I updated our Password Table for 2024 with more data!")
[OC] I updated our Password Table for 2024 with more data!
Posted by hivesystems
13 Comments
Hi everyone! I’m back again with the 2024 update to our password table!
Computers, and GPUs in particular, are getting faster (looking at you OpenAI), but password hash algorithm options are also getting better (for now…). This table outlines the time it takes a computer to brute force your password, and isn’t indicative of how fast a hacker can break your password – especially if they stole your password via phishing, or you reuse your passwords (shame!). It’s a good visual to show people why better passwords can lead to better cybersecurity – but ultimately it’s just one of many tools we can use to talk about protecting ourselves online!
**Data source:** Data compiled from research using multiple sources about hashing functions, GPU power, and related data. The methodology, assumptions, and more data can be found at [www.hivesystems.com/password](http://www.hivesystems.com/password)
**Tools used:** Illustrator and Excel
I guess a lot of people are going to change their passwords
Wow, yes. Time to change all passwords. Thank you for this.
correct horse battery staple
It is amusing to think about a hacker spending 350 billion years trying to crack someone’s password
My passwords are so long they don’t even fit in this table. Of course, only for services that allow it. Recently encountered a site that said “max 12 characters, no special characters, only letters and numbers”. In 2024, for fucks sake!
In reality, does a brute force attacker start with 4 characters, move up to 5, then 6, then 7?
If you have 12 RTX 4090s, then wouldn’t you be going after specific high-value targets rather than randos?
When you incorporate 2 factor it’s an insanely long time.
So you’re telling me that I went too far with my 24-char passwords?
Not sure I’m on board with the colouring splits, 1 year as severe as 3 seconds? 2 years equated to 33,000 years?
My password is exactly 18 characters with everything so iam sitting in the bottom right corner but also 12 characters are numbers
Good thing about the numbers is there is no reasonable connection its using a word spelt entirely with the letters of chemicals
Doesn’t this assume the hacker has unlimited login attempts?