Hardware Attack SimulationZero-Log Client-Side

Password Crack Time Calculator

Simulate exhaustive brute-force attack durations across multiple hardware categories, from web login throttling to multi-GPU cracking rigs.

Estimated Exhaustive Brute-Force Time
3.4 thousand years

Based on 50% average keyspace traversal

Search Space Size:9511 combinations
Speed:10,000,000,000 guesses/sec
Security Verdict:Secure Against GPUs

Understanding Hardware Cracking Speeds in Practice

Estimating password crack time requires modeling two primary variables: the total mathematical search space (pool size raised to length) and the adversary's hardware throughput (guesses per second).

Hardware Speed Reference Tiers

  • Online Web Login: ~1,000 attempts/sec (Aggressively throttled by firewalls and rate limits).
  • Standard CPU: ~100 million attempts/sec (Basic offline attack on un-salted hashes).
  • Consumer GPU (RTX 4090): ~10 billion attempts/sec (Standard enthusiast cracking rig).
  • 8x GPU Dedicated Rig: ~80 billion attempts/sec (Professional penetration testing hardware).
  • Supercomputer Cluster: ~100 trillion attempts/sec (State-sponsored distributed computing network).

When your password reaches 16 characters or 4 random words, the time required to exhaustively brute-force the keyspace expands into thousands or millions of years, even against supercomputing arrays.

Frequently Asked Questions

How fast can modern GPUs guess passwords?

A single modern graphics card (such as an Nvidia RTX 4090) can calculate over 10 to 20 billion NTLM or MD5 hashes per second. An 8-GPU custom mining rig reaches nearly 100 billion guesses per second.

Does key-stretching (like bcrypt or Argon2) slow down cracking?

Yes! Modern hashing algorithms like Argon2id and bcrypt use computational cost factors and memory requirements to deliberately slow down guesses to tens or hundreds per second, severely neutralizing hardware advantages.