Understanding Hardware Cracking Speeds in Practice
Estimating password crack time requires modeling two primary variables: the total mathematical search space (pool size raised to length) and the adversary's hardware throughput (guesses per second).
Hardware Speed Reference Tiers
- Online Web Login: ~1,000 attempts/sec (Aggressively throttled by firewalls and rate limits).
- Standard CPU: ~100 million attempts/sec (Basic offline attack on un-salted hashes).
- Consumer GPU (RTX 4090): ~10 billion attempts/sec (Standard enthusiast cracking rig).
- 8x GPU Dedicated Rig: ~80 billion attempts/sec (Professional penetration testing hardware).
- Supercomputer Cluster: ~100 trillion attempts/sec (State-sponsored distributed computing network).
When your password reaches 16 characters or 4 random words, the time required to exhaustively brute-force the keyspace expands into thousands or millions of years, even against supercomputing arrays.