--- title: 'How Does Someone ‘Crack’ Your Password?' url: 'https://blog.datum-consulting.com/blog/cracking-passwords' markdown: 'https://blog.datum-consulting.com/blog/cracking-passwords.md' date: '2020-09-03' description: 'We talk a lot about safe passwords here. But something we’ve never covered is why a safe password is safe. We’ll talk about the most common techniques used by password hackers and why using long, strong, and frequently changed passphrases prevent your accounts from being hacked. Password cracking i…' taxonomy: category: - blog tag: - passwords - 'brute-force attack' - 'dictionary attack' month: - September archives_month: - sep_2020 archives_year: - '2020' --- # How Does Someone ‘Crack’ Your Password? [ Home ](https://blog.datum-consulting.com/) How Does Someone ‘Crack’ Your Password? ## [How Does Someone ‘Crack’ Your Password?](https://blog.datum-consulting.com/blog/cracking-passwords) 3rd Sep 2020 [passwords](https://blog.datum-consulting.com/tag:passwords#body-wrapper) [brute-force attack](https://blog.datum-consulting.com/tag:brute-force%20attack#body-wrapper) [dictionary attack](https://blog.datum-consulting.com/tag:dictionary%20attack#body-wrapper) We talk a lot about safe passwords here. But something we’ve never covered is why a [safe password](what-makes-a-secure-password) is safe. We’ll talk about the most common techniques used by password hackers and why using long, strong, and frequently changed passphrases prevent your accounts from being hacked. Password cracking is simply a modern form of cryptography — the art of writing, or in this case, solving, codes. For password hackers, this process is automated by computer. Two of the most used versions are brute-force attacks and dictionary attacks. A brute-force attack tries every possible combination of letters, numbers, and symbols to crack a password. It’s the least complicated way to crack a password, but also the most ineffective since it wastes a lot of time making unlikely guesses. Longer passwords can also defeat this approach simply by virtue of time. For example, a brute-force attack might take 5 minutes to crack a 9-character password, but 9 hours for a 10-character password, 14 days for 11 characters, and 3.9 years for 12 characters. A dictionary attack enters every word in a dictionary as a password. This removes some of the randomnesses of a brute-force attack, reducing the amount of time needed to find the password—provided that the password is in the dictionary, of course. Note that “dictionary” doesn’t literally refer to a simple English dictionary; the entries in a cryptography dictionary may include common substitutions (for instance, “4pple” for “apple”) and numeric entries. Using a passphrase verus a password is one way to foil a dictionary attack. For example, *Sh3rl0ck* is not a terrible base password, but *Sh3rl0ck@221BBakerSt* is much stronger against brute force and dictionary-based attacks. [ Previous Post](https://blog.datum-consulting.com/blog/fend-off-hackers) [Next Post ](https://blog.datum-consulting.com/blog/gartner-report-mfa-is-must-for-mse) #### Related Posts - 100 [The Most Hacked Passwords Around the World](https://blog.datum-consulting.com/blog/most-hacked-passwords "The Most Hacked Passwords Around the World") - 100 [Apple, Google and Microsoft Commit to Expanded Support for FIDO Standard to Accelerate Availability of Passwordless Sign-Ins](https://blog.datum-consulting.com/blog/passwordless-sign-ins "Apple, Google and Microsoft Commit to Expanded Support for FIDO Standard to Accelerate Availability of Passwordless Sign-Ins") - 100 [How Hackers Get Your Passwords and How To Defend Yourself](https://blog.datum-consulting.com/blog/hackers-get-passwords "How Hackers Get Your Passwords and How To Defend Yourself") - 100 [Your Pa$$word Doesn’t Matter](https://blog.datum-consulting.com/blog/your-password-doesnt-matter "Your Pa$$word Doesn’t Matter") - 100 [One Simple Action You Can Take to Prevent 99.9 Percent of Attacks on Your Accounts](https://blog.datum-consulting.com/blog/one-action-to-prevent-attacks "One Simple Action You Can Take to Prevent 99.9 Percent of Attacks on Your Accounts") [JOIN OUR NEWSLETTER](https://zc.vg/sf/bawK1) [PAY INVOICE ONLINE](https://datum.connectboosterportal.com/authentication/login) [![](https://blog.datum-consulting.com/modules/sidebar/Yubico.png)](https://www.pntra.com/t/SkNJTk5MT09DSEZMTExNQ0dPR0tNSw) #### Follow Us [](https://twitter.com/datumconsulting "Twitter")[](https://www.linkedin.com/company/datum-consulting/ "LinkedIn") "); #### Popular Tags #### Archives - [ 3 May 2022 ](https://blog.datum-consulting.com/archives_month:may_2022) - [ 3 March 2022 ](https://blog.datum-consulting.com/archives_month:mar_2022) - [ 3 February 2022 ](https://blog.datum-consulting.com/archives_month:feb_2022) - [ 2 January 2022 ](https://blog.datum-consulting.com/archives_month:jan_2022) - [ 1 December 2021 ](https://blog.datum-consulting.com/archives_month:dec_2021) - [ 2 November 2021 ](https://blog.datum-consulting.com/archives_month:nov_2021) - [ 2 October 2021 ](https://blog.datum-consulting.com/archives_month:oct_2021) - [ 1 September 2021 ](https://blog.datum-consulting.com/archives_month:sep_2021) - [ 3 August 2021 ](https://blog.datum-consulting.com/archives_month:aug_2021) - [ 2 July 2021 ](https://blog.datum-consulting.com/archives_month:jul_2021) - [ 4 June 2021 ](https://blog.datum-consulting.com/archives_month:jun_2021) - [ 2 May 2021 ](https://blog.datum-consulting.com/archives_month:may_2021) --- ## Navigation - Parent: [Home](https://blog.datum-consulting.com/index.md) - Previous: [Gartner Report: Multifactor Authentication Is a Must for Midsize Enterprises](https://blog.datum-consulting.com/blog/gartner-report-mfa-is-must-for-mse.md) - Next: [What You Can Do To Fend Off Hackers](https://blog.datum-consulting.com/blog/fend-off-hackers.md)