| password: | LihiandthepeopleofMorianton | |
| guesses_log10: | 21.44647 | |
| score: | 4 / 4 | |
| function runtime (ms): | 4 | |
| guess times: | ||
| 100 / hour: | centuries | (throttled online attack) |
| 10 / second: | centuries | (unthrottled online attack) |
| 10k / second: | centuries | (offline attack, slow hash, many cores) |
| 10B / second: | centuries | (offline attack, fast hash, many cores) |
| match sequence: | ||
| 'Lihiand' | |
| pattern: | bruteforce |
| guesses_log10: | 7 |
| 'the' | |
| pattern: | dictionary |
| guesses_log10: | 1.69897 |
| dictionary_name: | english_wikipedia |
| rank: | 1 |
| reversed: | false |
| base-guesses: | 1 |
| uppercase-variations: | 1 |
| l33t-variations: | 1 |
| 'people' | |
| pattern: | dictionary |
| guesses_log10: | 1.96848 |
| dictionary_name: | english_wikipedia |
| rank: | 93 |
| reversed: | false |
| base-guesses: | 93 |
| uppercase-variations: | 1 |
| l33t-variations: | 1 |
| 'ofMori' | |
| pattern: | bruteforce |
| guesses_log10: | 6 |
| 'anton' | |
| pattern: | dictionary |
| guesses_log10: | 2.69984 |
| dictionary_name: | male_names |
| rank: | 501 |
| reversed: | false |
| base-guesses: | 501 |
| uppercase-variations: | 1 |
| l33t-variations: | 1 |
| password: | zxcvbn | |
| guesses_log10: | 1.76343 | |
| score: | 0 / 4 | |
| function runtime (ms): | 1 | |
| guess times: | ||
| 100 / hour: | 35 minutes | (throttled online attack) |
| 10 / second: | 6 seconds | (unthrottled online attack) |
| 10k / second: | less than a second | (offline attack, slow hash, many cores) |
| 10B / second: | less than a second | (offline attack, fast hash, many cores) |
| warning: | This is a top-100 common password | |
| suggestions: |
- Add another word or two. Uncommon words are better. |
|
| match sequence: | ||
| 'zxcvbn' | |
| pattern: | dictionary |
| guesses_log10: | 1.75587 |
| dictionary_name: | passwords |
| rank: | 57 |
| reversed: | false |
| base-guesses: | 57 |
| uppercase-variations: | 1 |
| l33t-variations: | 1 |
| password: | qwER43@! | |
| guesses_log10: | 7.95651 | |
| score: | 2 / 4 | |
| function runtime (ms): | 1 | |
| guess times: | ||
| 100 / hour: | centuries | (throttled online attack) |
| 10 / second: | 3 months | (unthrottled online attack) |
| 10k / second: | 3 hours | (offline attack, slow hash, many cores) |
| 10B / second: | less than a second | (offline attack, fast hash, many cores) |
| warning: | Short keyboard patterns are easy to guess | |
| suggestions: |
- Add another word or two. Uncommon words are better. - Use a longer keyboard pattern with more turns |
|
| match sequence: | ||
| 'qwER43@!' | |
| pattern: | spatial |
| guesses_log10: | 7.95651 |
| graph: | qwerty |
| turns: | 3 |
| shifted count: | 4 |
| password: | Tr0ub4dour&3 | |
| guesses_log10: | 7.28008 | |
| score: | 2 / 4 | |
| function runtime (ms): | 0 | |
| guess times: | ||
| 100 / hour: | 21 years | (throttled online attack) |
| 10 / second: | 22 days | (unthrottled online attack) |
| 10k / second: | 32 minutes | (offline attack, slow hash, many cores) |
| 10B / second: | less than a second | (offline attack, fast hash, many cores) |
| suggestions: |
- Add another word or two. Uncommon words are better. - Capitalization doesn't help very much - Predictable substitutions like '@' instead of 'a' don't help very much |
|
| match sequence: | ||
| 'Tr0ub4dour' | |
| pattern: | dictionary |
| guesses_log10: | 4.97882 |
| dictionary_name: | us_tv_and_film |
| rank: | 11905 |
| reversed: | false |
| l33t subs: | 0 -> o, 4 -> a |
| un-l33ted: | troubadour |
| base-guesses: | 11905 |
| uppercase-variations: | 2 |
| l33t-variations: | 4 |
| '&3' | |
| pattern: | bruteforce |
| guesses_log10: | 2 |
| password: | correcthorsebatterystaple | |
| guesses_log10: | 14.43696 | |
| score: | 4 / 4 | |
| function runtime (ms): | 3 | |
| guess times: | ||
| 100 / hour: | centuries | (throttled online attack) |
| 10 / second: | centuries | (unthrottled online attack) |
| 10k / second: | centuries | (offline attack, slow hash, many cores) |
| 10B / second: | 8 hours | (offline attack, fast hash, many cores) |
| match sequence: | ||
| 'correct' | |
| pattern: | dictionary |
| guesses_log10: | 3.0569 |
| dictionary_name: | us_tv_and_film |
| rank: | 1140 |
| reversed: | false |
| base-guesses: | 1140 |
| uppercase-variations: | 1 |
| l33t-variations: | 1 |
| 'horse' | |
| pattern: | dictionary |
| guesses_log10: | 2.84572 |
| dictionary_name: | passwords |
| rank: | 701 |
| reversed: | false |
| base-guesses: | 701 |
| uppercase-variations: | 1 |
| l33t-variations: | 1 |
| 'battery' | |
| pattern: | dictionary |
| guesses_log10: | 3.34183 |
| dictionary_name: | english_wikipedia |
| rank: | 2197 |
| reversed: | false |
| base-guesses: | 2197 |
| uppercase-variations: | 1 |
| l33t-variations: | 1 |
| 'staple' | |
| pattern: | dictionary |
| guesses_log10: | 3.8107 |
| dictionary_name: | english_wikipedia |
| rank: | 6467 |
| reversed: | false |
| base-guesses: | 6467 |
| uppercase-variations: | 1 |
| l33t-variations: | 1 |
| password: | coRrecth0rseba++ery9.23.2007staple$ | |
| guesses_log10: | 20.71185 | |
| score: | 4 / 4 | |
| function runtime (ms): | 14 | |
| guess times: | ||
| 100 / hour: | centuries | (throttled online attack) |
| 10 / second: | centuries | (unthrottled online attack) |
| 10k / second: | centuries | (offline attack, slow hash, many cores) |
| 10B / second: | centuries | (offline attack, fast hash, many cores) |
| match sequence: | ||
| 'coRrect' | |
| pattern: | dictionary |
| guesses_log10: | 3.902 |
| dictionary_name: | us_tv_and_film |
| rank: | 1140 |
| reversed: | false |
| base-guesses: | 1140 |
| uppercase-variations: | 7 |
| l33t-variations: | 1 |
| 'h0rse' | |
| pattern: | dictionary |
| guesses_log10: | 3.14675 |
| dictionary_name: | passwords |
| rank: | 701 |
| reversed: | false |
| l33t subs: | 0 -> o |
| un-l33ted: | horse |
| base-guesses: | 701 |
| uppercase-variations: | 1 |
| l33t-variations: | 2 |
| 'ba++ery' | |
| pattern: | dictionary |
| guesses_log10: | 3.64286 |
| dictionary_name: | english_wikipedia |
| rank: | 2197 |
| reversed: | false |
| l33t subs: | + -> t |
| un-l33ted: | battery |
| base-guesses: | 2197 |
| uppercase-variations: | 1 |
| l33t-variations: | 2 |
| '9.23.2007' | |
| pattern: | date |
| guesses_log10: | 4.46538 |
| day: | 23 |
| month: | 9 |
| year: | 2007 |
| separator: | '.' |
| 'staple$' | |
| pattern: | dictionary |
| guesses_log10: | 3.47567 |
| dictionary_name: | surnames |
| rank: | 1495 |
| reversed: | false |
| l33t subs: | $ -> s |
| un-l33ted: | staples |
| base-guesses: | 1495 |
| uppercase-variations: | 1 |
| l33t-variations: | 2 |
| password: | p@ssword | |
| guesses_log10: | 0.69897 | |
| score: | 0 / 4 | |
| function runtime (ms): | 0 | |
| guess times: | ||
| 100 / hour: | 3 minutes | (throttled online attack) |
| 10 / second: | less than a second | (unthrottled online attack) |
| 10k / second: | less than a second | (offline attack, slow hash, many cores) |
| 10B / second: | less than a second | (offline attack, fast hash, many cores) |
| warning: | This is similar to a commonly used password | |
| suggestions: |
- Add another word or two. Uncommon words are better. - Predictable substitutions like '@' instead of 'a' don't help very much |
|
| match sequence: | ||
| 'p@ssword' | |
| pattern: | dictionary |
| guesses_log10: | 0.60206 |
| dictionary_name: | passwords |
| rank: | 2 |
| reversed: | false |
| l33t subs: | @ -> a |
| un-l33ted: | password |
| base-guesses: | 2 |
| uppercase-variations: | 1 |
| l33t-variations: | 2 |
| password: | p@$$word | |
| guesses_log10: | 0.95424 | |
| score: | 0 / 4 | |
| function runtime (ms): | 3 | |
| guess times: | ||
| 100 / hour: | 5 minutes | (throttled online attack) |
| 10 / second: | less than a second | (unthrottled online attack) |
| 10k / second: | less than a second | (offline attack, slow hash, many cores) |
| 10B / second: | less than a second | (offline attack, fast hash, many cores) |
| warning: | This is similar to a commonly used password | |
| suggestions: |
- Add another word or two. Uncommon words are better. - Predictable substitutions like '@' instead of 'a' don't help very much |
|
| match sequence: | ||
| 'p@$$word' | |
| pattern: | dictionary |
| guesses_log10: | 0.90309 |
| dictionary_name: | passwords |
| rank: | 2 |
| reversed: | false |
| l33t subs: | @ -> a, $ -> s |
| un-l33ted: | password |
| base-guesses: | 2 |
| uppercase-variations: | 1 |
| l33t-variations: | 4 |
| password: | 123456 | |
| guesses_log10: | 0.30103 | |
| score: | 0 / 4 | |
| function runtime (ms): | 0 | |
| guess times: | ||
| 100 / hour: | 1 minute | (throttled online attack) |
| 10 / second: | less than a second | (unthrottled online attack) |
| 10k / second: | less than a second | (offline attack, slow hash, many cores) |
| 10B / second: | less than a second | (offline attack, fast hash, many cores) |
| warning: | This is a top-10 common password | |
| suggestions: |
- Add another word or two. Uncommon words are better. |
|
| match sequence: | ||
| '123456' | |
| pattern: | dictionary |
| guesses_log10: | 0 |
| dictionary_name: | passwords |
| rank: | 1 |
| reversed: | false |
| base-guesses: | 1 |
| uppercase-variations: | 1 |
| l33t-variations: | 1 |
| password: | 123456789 | |
| guesses_log10: | 0.77815 | |
| score: | 0 / 4 | |
| function runtime (ms): | 2 | |
| guess times: | ||
| 100 / hour: | 4 minutes | (throttled online attack) |
| 10 / second: | less than a second | (unthrottled online attack) |
| 10k / second: | less than a second | (offline attack, slow hash, many cores) |
| 10B / second: | less than a second | (offline attack, fast hash, many cores) |
| warning: | This is a top-10 common password | |
| suggestions: |
- Add another word or two. Uncommon words are better. |
|
| match sequence: | ||
| '123456789' | |
| pattern: | dictionary |
| guesses_log10: | 0.69897 |
| dictionary_name: | passwords |
| rank: | 5 |
| reversed: | false |
| base-guesses: | 5 |
| uppercase-variations: | 1 |
| l33t-variations: | 1 |
| password: | 11111111 | |
| guesses_log10: | 1.80618 | |
| score: | 0 / 4 | |
| function runtime (ms): | 0 | |
| guess times: | ||
| 100 / hour: | 38 minutes | (throttled online attack) |
| 10 / second: | 6 seconds | (unthrottled online attack) |
| 10k / second: | less than a second | (offline attack, slow hash, many cores) |
| 10B / second: | less than a second | (offline attack, fast hash, many cores) |
| warning: | This is a top-100 common password | |
| suggestions: |
- Add another word or two. Uncommon words are better. |
|
| match sequence: | ||
| '11111111' | |
| pattern: | dictionary |
| guesses_log10: | 1.79934 |
| dictionary_name: | passwords |
| rank: | 63 |
| reversed: | false |
| base-guesses: | 63 |
| uppercase-variations: | 1 |
| l33t-variations: | 1 |
| password: | zxcvbnm,./ | |
| guesses_log10: | 3.58984 | |
| score: | 1 / 4 | |
| function runtime (ms): | 1 | |
| guess times: | ||
| 100 / hour: | 2 days | (throttled online attack) |
| 10 / second: | 6 minutes | (unthrottled online attack) |
| 10k / second: | less than a second | (offline attack, slow hash, many cores) |
| 10B / second: | less than a second | (offline attack, fast hash, many cores) |
| warning: | Straight rows of keys are easy to guess | |
| suggestions: |
- Add another word or two. Uncommon words are better. - Use a longer keyboard pattern with more turns |
|
| match sequence: | ||
| 'zxcvbnm,./' | |
| pattern: | spatial |
| guesses_log10: | 3.58973 |
| graph: | qwerty |
| turns: | 1 |
| shifted count: | 0 |
| password: | love88 | |
| guesses_log10: | 4.22011 | |
| score: | 1 / 4 | |
| function runtime (ms): | 0 | |
| guess times: | ||
| 100 / hour: | 7 days | (throttled online attack) |
| 10 / second: | 28 minutes | (unthrottled online attack) |
| 10k / second: | 2 seconds | (offline attack, slow hash, many cores) |
| 10B / second: | less than a second | (offline attack, fast hash, many cores) |
| warning: | This is similar to a commonly used password | |
| suggestions: |
- Add another word or two. Uncommon words are better. |
|
| match sequence: | ||
| 'love' | |
| pattern: | dictionary |
| guesses_log10: | 1.81954 |
| dictionary_name: | passwords |
| rank: | 66 |
| reversed: | false |
| base-guesses: | 66 |
| uppercase-variations: | 1 |
| l33t-variations: | 1 |
| '88' | |
| pattern: | repeat |
| guesses_log10: | 1.69897 |
| base_token: | '8' |
| base_guesses: | 12 |
| num_repeats: | 2 |
| password: | angel08 | |
| guesses_log10: | 4.35801 | |
| score: | 1 / 4 | |
| function runtime (ms): | 0 | |
| guess times: | ||
| 100 / hour: | 10 days | (throttled online attack) |
| 10 / second: | 38 minutes | (unthrottled online attack) |
| 10k / second: | 2 seconds | (offline attack, slow hash, many cores) |
| 10B / second: | less than a second | (offline attack, fast hash, many cores) |
| warning: | Common names and surnames are easy to guess | |
| suggestions: |
- Add another word or two. Uncommon words are better. - Predictable substitutions like '@' instead of 'a' don't help very much |
|
| match sequence: | ||
| 'angel0' | |
| pattern: | dictionary |
| guesses_log10: | 2.76492 |
| dictionary_name: | male_names |
| rank: | 291 |
| reversed: | false |
| l33t subs: | 0 -> o |
| un-l33ted: | angelo |
| base-guesses: | 291 |
| uppercase-variations: | 1 |
| l33t-variations: | 2 |
| '8' | |
| pattern: | bruteforce |
| guesses_log10: | 1.04139 |
| password: | monkey13 | |
| guesses_log10: | 4.11096 | |
| score: | 1 / 4 | |
| function runtime (ms): | 1 | |
| guess times: | ||
| 100 / hour: | 5 days | (throttled online attack) |
| 10 / second: | 22 minutes | (unthrottled online attack) |
| 10k / second: | 1 second | (offline attack, slow hash, many cores) |
| 10B / second: | less than a second | (offline attack, fast hash, many cores) |
| warning: | This is a very common password | |
| suggestions: |
- Add another word or two. Uncommon words are better. |
|
| match sequence: | ||
| 'monkey13' | |
| pattern: | dictionary |
| guesses_log10: | 4.11093 |
| dictionary_name: | passwords |
| rank: | 12910 |
| reversed: | false |
| base-guesses: | 12910 |
| uppercase-variations: | 1 |
| l33t-variations: | 1 |
| password: | iloveyou | |
| guesses_log10: | 1.68124 | |
| score: | 0 / 4 | |
| function runtime (ms): | 0 | |
| guess times: | ||
| 100 / hour: | 29 minutes | (throttled online attack) |
| 10 / second: | 5 seconds | (unthrottled online attack) |
| 10k / second: | less than a second | (offline attack, slow hash, many cores) |
| 10B / second: | less than a second | (offline attack, fast hash, many cores) |
| warning: | This is a top-100 common password | |
| suggestions: |
- Add another word or two. Uncommon words are better. |
|
| match sequence: | ||
| 'iloveyou' | |
| pattern: | dictionary |
| guesses_log10: | 1.6721 |
| dictionary_name: | passwords |
| rank: | 47 |
| reversed: | false |
| base-guesses: | 47 |
| uppercase-variations: | 1 |
| l33t-variations: | 1 |
| password: | woaini | |
| guesses_log10: | 4.06232 | |
| score: | 1 / 4 | |
| function runtime (ms): | 0 | |
| guess times: | ||
| 100 / hour: | 5 days | (throttled online attack) |
| 10 / second: | 19 minutes | (unthrottled online attack) |
| 10k / second: | 1 second | (offline attack, slow hash, many cores) |
| 10B / second: | less than a second | (offline attack, fast hash, many cores) |
| warning: | This is a very common password | |
| suggestions: |
- Add another word or two. Uncommon words are better. |
|
| match sequence: | ||
| 'woaini' | |
| pattern: | dictionary |
| guesses_log10: | 4.06228 |
| dictionary_name: | passwords |
| rank: | 11542 |
| reversed: | false |
| base-guesses: | 11542 |
| uppercase-variations: | 1 |
| l33t-variations: | 1 |
| password: | wang | |
| guesses_log10: | 2.94596 | |
| score: | 0 / 4 | |
| function runtime (ms): | 0 | |
| guess times: | ||
| 100 / hour: | 9 hours | (throttled online attack) |
| 10 / second: | 1 minute | (unthrottled online attack) |
| 10k / second: | less than a second | (offline attack, slow hash, many cores) |
| 10B / second: | less than a second | (offline attack, fast hash, many cores) |
| warning: | Names and surnames by themselves are easy to guess | |
| suggestions: |
- Add another word or two. Uncommon words are better. |
|
| match sequence: | ||
| 'wang' | |
| pattern: | dictionary |
| guesses_log10: | 2.94547 |
| dictionary_name: | surnames |
| rank: | 882 |
| reversed: | false |
| base-guesses: | 882 |
| uppercase-variations: | 1 |
| l33t-variations: | 1 |
| password: | tianya | |
| guesses_log10: | 5.31492 | |
| score: | 1 / 4 | |
| function runtime (ms): | 0 | |
| guess times: | ||
| 100 / hour: | 3 months | (throttled online attack) |
| 10 / second: | 6 hours | (unthrottled online attack) |
| 10k / second: | 21 seconds | (offline attack, slow hash, many cores) |
| 10B / second: | less than a second | (offline attack, fast hash, many cores) |
| warning: | Common names and surnames are easy to guess | |
| suggestions: |
- Add another word or two. Uncommon words are better. |
|
| match sequence: | ||
| 'ti' | |
| pattern: | dictionary |
| guesses_log10: | 1.69897 |
| dictionary_name: | us_tv_and_film |
| rank: | 5 |
| reversed: | true |
| base-guesses: | 5 |
| uppercase-variations: | 1 |
| l33t-variations: | 1 |
| 'anya' | |
| pattern: | dictionary |
| guesses_log10: | 3.29336 |
| dictionary_name: | female_names |
| rank: | 1965 |
| reversed: | false |
| base-guesses: | 1965 |
| uppercase-variations: | 1 |
| l33t-variations: | 1 |
| password: | zhang198822 | |
| guesses_log10: | 7.8996 | |
| score: | 2 / 4 | |
| function runtime (ms): | 1 | |
| guess times: | ||
| 100 / hour: | 89 years | (throttled online attack) |
| 10 / second: | 3 months | (unthrottled online attack) |
| 10k / second: | 2 hours | (offline attack, slow hash, many cores) |
| 10B / second: | less than a second | (offline attack, fast hash, many cores) |
| warning: | Dates are often easy to guess | |
| suggestions: |
- Add another word or two. Uncommon words are better. - Avoid dates and years that are associated with you |
|
| match sequence: | ||
| 'zhang' | |
| pattern: | dictionary |
| guesses_log10: | 3.50474 |
| dictionary_name: | surnames |
| rank: | 3197 |
| reversed: | false |
| base-guesses: | 3197 |
| uppercase-variations: | 1 |
| l33t-variations: | 1 |
| '198822' | |
| pattern: | date |
| guesses_log10: | 4.09377 |
| day: | 2 |
| month: | 2 |
| year: | 1988 |
| separator: | '' |
| password: | li4478 | |
| guesses_log10: | 6 | |
| score: | 1 / 4 | |
| function runtime (ms): | 1 | |
| guess times: | ||
| 100 / hour: | 1 year | (throttled online attack) |
| 10 / second: | 1 day | (unthrottled online attack) |
| 10k / second: | 2 minutes | (offline attack, slow hash, many cores) |
| 10B / second: | less than a second | (offline attack, fast hash, many cores) |
| suggestions: |
- Add another word or two. Uncommon words are better. |
|
| match sequence: | ||
| 'li4478' | |
| pattern: | bruteforce |
| guesses_log10: | 6 |
| password: | a6a4Aa8a | |
| guesses_log10: | 8 | |
| score: | 2 / 4 | |
| function runtime (ms): | 0 | |
| guess times: | ||
| 100 / hour: | centuries | (throttled online attack) |
| 10 / second: | 4 months | (unthrottled online attack) |
| 10k / second: | 3 hours | (offline attack, slow hash, many cores) |
| 10B / second: | less than a second | (offline attack, fast hash, many cores) |
| suggestions: |
- Add another word or two. Uncommon words are better. |
|
| match sequence: | ||
| 'a6a4Aa8a' | |
| pattern: | bruteforce |
| guesses_log10: | 8 |
| password: | b6b4Bb8b | |
| guesses_log10: | 8 | |
| score: | 2 / 4 | |
| function runtime (ms): | 1 | |
| guess times: | ||
| 100 / hour: | centuries | (throttled online attack) |
| 10 / second: | 4 months | (unthrottled online attack) |
| 10k / second: | 3 hours | (offline attack, slow hash, many cores) |
| 10B / second: | less than a second | (offline attack, fast hash, many cores) |
| suggestions: |
- Add another word or two. Uncommon words are better. |
|
| match sequence: | ||
| 'b6b4Bb8b' | |
| pattern: | bruteforce |
| guesses_log10: | 8 |
| password: | z6z4Zz8z | |
| guesses_log10: | 8 | |
| score: | 2 / 4 | |
| function runtime (ms): | 0 | |
| guess times: | ||
| 100 / hour: | centuries | (throttled online attack) |
| 10 / second: | 4 months | (unthrottled online attack) |
| 10k / second: | 3 hours | (offline attack, slow hash, many cores) |
| 10B / second: | less than a second | (offline attack, fast hash, many cores) |
| suggestions: |
- Add another word or two. Uncommon words are better. |
|
| match sequence: | ||
| 'z6z4Zz8z' | |
| pattern: | bruteforce |
| guesses_log10: | 8 |
| password: | aiIiAaIA | |
| guesses_log10: | 8 | |
| score: | 2 / 4 | |
| function runtime (ms): | 1 | |
| guess times: | ||
| 100 / hour: | centuries | (throttled online attack) |
| 10 / second: | 4 months | (unthrottled online attack) |
| 10k / second: | 3 hours | (offline attack, slow hash, many cores) |
| 10B / second: | less than a second | (offline attack, fast hash, many cores) |
| suggestions: |
- Add another word or two. Uncommon words are better. |
|
| match sequence: | ||
| 'aiIiAaIA' | |
| pattern: | bruteforce |
| guesses_log10: | 8 |
| password: | zxXxZzXZ | |
| guesses_log10: | 8 | |
| score: | 2 / 4 | |
| function runtime (ms): | 0 | |
| guess times: | ||
| 100 / hour: | centuries | (throttled online attack) |
| 10 / second: | 4 months | (unthrottled online attack) |
| 10k / second: | 3 hours | (offline attack, slow hash, many cores) |
| 10B / second: | less than a second | (offline attack, fast hash, many cores) |
| suggestions: |
- Add another word or two. Uncommon words are better. |
|
| match sequence: | ||
| 'zxXxZzXZ' | |
| pattern: | bruteforce |
| guesses_log10: | 8 |
| password: | pässwörd | |
| guesses_log10: | 8 | |
| score: | 2 / 4 | |
| function runtime (ms): | 0 | |
| guess times: | ||
| 100 / hour: | centuries | (throttled online attack) |
| 10 / second: | 4 months | (unthrottled online attack) |
| 10k / second: | 3 hours | (offline attack, slow hash, many cores) |
| 10B / second: | less than a second | (offline attack, fast hash, many cores) |
| suggestions: |
- Add another word or two. Uncommon words are better. |
|
| match sequence: | ||
| 'pässwörd' | |
| pattern: | bruteforce |
| guesses_log10: | 8 |
| password: | alpha bravo charlie delta | |
| guesses_log10: | 17.7335 | |
| score: | 4 / 4 | |
| function runtime (ms): | 3 | |
| guess times: | ||
| 100 / hour: | centuries | (throttled online attack) |
| 10 / second: | centuries | (unthrottled online attack) |
| 10k / second: | centuries | (offline attack, slow hash, many cores) |
| 10B / second: | 2 years | (offline attack, fast hash, many cores) |
| match sequence: | ||
| 'alpha' | |
| pattern: | dictionary |
| guesses_log10: | 2.82995 |
| dictionary_name: | passwords |
| rank: | 676 |
| reversed: | false |
| base-guesses: | 676 |
| uppercase-variations: | 1 |
| l33t-variations: | 1 |
| ' bravo ' | |
| pattern: | bruteforce |
| guesses_log10: | 7 |
| 'charlie' | |
| pattern: | dictionary |
| guesses_log10: | 1.69897 |
| dictionary_name: | passwords |
| rank: | 45 |
| reversed: | false |
| base-guesses: | 45 |
| uppercase-variations: | 1 |
| l33t-variations: | 1 |
| ' ' | |
| pattern: | bruteforce |
| guesses_log10: | 1.04139 |
| 'delta' | |
| pattern: | dictionary |
| guesses_log10: | 3.07591 |
| dictionary_name: | passwords |
| rank: | 1191 |
| reversed: | false |
| base-guesses: | 1191 |
| uppercase-variations: | 1 |
| l33t-variations: | 1 |
| password: | a b c d e f g h i j k l m n o p q r s t u v w x y z 0 1 2 3 4 5 6 7 8 9 | |
| guesses_log10: | 71 | |
| score: | 4 / 4 | |
| function runtime (ms): | 50 | |
| guess times: | ||
| 100 / hour: | centuries | (throttled online attack) |
| 10 / second: | centuries | (unthrottled online attack) |
| 10k / second: | centuries | (offline attack, slow hash, many cores) |
| 10B / second: | centuries | (offline attack, fast hash, many cores) |
| match sequence: | ||
| 'a b c d e f g h i j k l m n o p q r s t u v w x y z 0 1 2 3 4 5 6 7 8 9' | |
| pattern: | bruteforce |
| guesses_log10: | 71 |
| password: | a b c 1 2 3 | |
| guesses_log10: | 11 | |
| score: | 4 / 4 | |
| function runtime (ms): | 1 | |
| guess times: | ||
| 100 / hour: | centuries | (throttled online attack) |
| 10 / second: | centuries | (unthrottled online attack) |
| 10k / second: | 4 months | (offline attack, slow hash, many cores) |
| 10B / second: | 10 seconds | (offline attack, fast hash, many cores) |
| match sequence: | ||
| 'a b c 1 2 3' | |
| pattern: | bruteforce |
| guesses_log10: | 11 |
| password: | correct-horse-battery-staple | |
| guesses_log10: | 20.33003 | |
| score: | 4 / 4 | |
| function runtime (ms): | 3 | |
| guess times: | ||
| 100 / hour: | centuries | (throttled online attack) |
| 10 / second: | centuries | (unthrottled online attack) |
| 10k / second: | centuries | (offline attack, slow hash, many cores) |
| 10B / second: | centuries | (offline attack, fast hash, many cores) |
| match sequence: | ||
| 'correct' | |
| pattern: | dictionary |
| guesses_log10: | 3.0569 |
| dictionary_name: | us_tv_and_film |
| rank: | 1140 |
| reversed: | false |
| base-guesses: | 1140 |
| uppercase-variations: | 1 |
| l33t-variations: | 1 |
| '-horse-' | |
| pattern: | bruteforce |
| guesses_log10: | 7 |
| 'battery' | |
| pattern: | dictionary |
| guesses_log10: | 3.34183 |
| dictionary_name: | english_wikipedia |
| rank: | 2197 |
| reversed: | false |
| base-guesses: | 2197 |
| uppercase-variations: | 1 |
| l33t-variations: | 1 |
| '-' | |
| pattern: | bruteforce |
| guesses_log10: | 1.04139 |
| 'staple' | |
| pattern: | dictionary |
| guesses_log10: | 3.8107 |
| dictionary_name: | english_wikipedia |
| rank: | 6467 |
| reversed: | false |
| base-guesses: | 6467 |
| uppercase-variations: | 1 |
| l33t-variations: | 1 |
| password: | correct.horse.battery.staple | |
| guesses_log10: | 20.33003 | |
| score: | 4 / 4 | |
| function runtime (ms): | 2 | |
| guess times: | ||
| 100 / hour: | centuries | (throttled online attack) |
| 10 / second: | centuries | (unthrottled online attack) |
| 10k / second: | centuries | (offline attack, slow hash, many cores) |
| 10B / second: | centuries | (offline attack, fast hash, many cores) |
| match sequence: | ||
| 'correct' | |
| pattern: | dictionary |
| guesses_log10: | 3.0569 |
| dictionary_name: | us_tv_and_film |
| rank: | 1140 |
| reversed: | false |
| base-guesses: | 1140 |
| uppercase-variations: | 1 |
| l33t-variations: | 1 |
| '.horse.' | |
| pattern: | bruteforce |
| guesses_log10: | 7 |
| 'battery' | |
| pattern: | dictionary |
| guesses_log10: | 3.34183 |
| dictionary_name: | english_wikipedia |
| rank: | 2197 |
| reversed: | false |
| base-guesses: | 2197 |
| uppercase-variations: | 1 |
| l33t-variations: | 1 |
| '.' | |
| pattern: | bruteforce |
| guesses_log10: | 1.04139 |
| 'staple' | |
| pattern: | dictionary |
| guesses_log10: | 3.8107 |
| dictionary_name: | english_wikipedia |
| rank: | 6467 |
| reversed: | false |
| base-guesses: | 6467 |
| uppercase-variations: | 1 |
| l33t-variations: | 1 |
| password: | correct,horse,battery,staple | |
| guesses_log10: | 20.33003 | |
| score: | 4 / 4 | |
| function runtime (ms): | 3 | |
| guess times: | ||
| 100 / hour: | centuries | (throttled online attack) |
| 10 / second: | centuries | (unthrottled online attack) |
| 10k / second: | centuries | (offline attack, slow hash, many cores) |
| 10B / second: | centuries | (offline attack, fast hash, many cores) |
| match sequence: | ||
| 'correct' | |
| pattern: | dictionary |
| guesses_log10: | 3.0569 |
| dictionary_name: | us_tv_and_film |
| rank: | 1140 |
| reversed: | false |
| base-guesses: | 1140 |
| uppercase-variations: | 1 |
| l33t-variations: | 1 |
| ',horse,' | |
| pattern: | bruteforce |
| guesses_log10: | 7 |
| 'battery' | |
| pattern: | dictionary |
| guesses_log10: | 3.34183 |
| dictionary_name: | english_wikipedia |
| rank: | 2197 |
| reversed: | false |
| base-guesses: | 2197 |
| uppercase-variations: | 1 |
| l33t-variations: | 1 |
| ',' | |
| pattern: | bruteforce |
| guesses_log10: | 1.04139 |
| 'staple' | |
| pattern: | dictionary |
| guesses_log10: | 3.8107 |
| dictionary_name: | english_wikipedia |
| rank: | 6467 |
| reversed: | false |
| base-guesses: | 6467 |
| uppercase-variations: | 1 |
| l33t-variations: | 1 |
| password: | correct~horse~battery~staple | |
| guesses_log10: | 20.33003 | |
| score: | 4 / 4 | |
| function runtime (ms): | 3 | |
| guess times: | ||
| 100 / hour: | centuries | (throttled online attack) |
| 10 / second: | centuries | (unthrottled online attack) |
| 10k / second: | centuries | (offline attack, slow hash, many cores) |
| 10B / second: | centuries | (offline attack, fast hash, many cores) |
| match sequence: | ||
| 'correct' | |
| pattern: | dictionary |
| guesses_log10: | 3.0569 |
| dictionary_name: | us_tv_and_film |
| rank: | 1140 |
| reversed: | false |
| base-guesses: | 1140 |
| uppercase-variations: | 1 |
| l33t-variations: | 1 |
| '~horse~' | |
| pattern: | bruteforce |
| guesses_log10: | 7 |
| 'battery' | |
| pattern: | dictionary |
| guesses_log10: | 3.34183 |
| dictionary_name: | english_wikipedia |
| rank: | 2197 |
| reversed: | false |
| base-guesses: | 2197 |
| uppercase-variations: | 1 |
| l33t-variations: | 1 |
| '~' | |
| pattern: | bruteforce |
| guesses_log10: | 1.04139 |
| 'staple' | |
| pattern: | dictionary |
| guesses_log10: | 3.8107 |
| dictionary_name: | english_wikipedia |
| rank: | 6467 |
| reversed: | false |
| base-guesses: | 6467 |
| uppercase-variations: | 1 |
| l33t-variations: | 1 |
| password: | WhyfaultthebardifhesingstheArgives’harshfate? | |
| guesses_log10: | 40.75446 | |
| score: | 4 / 4 | |
| function runtime (ms): | 6 | |
| guess times: | ||
| 100 / hour: | centuries | (throttled online attack) |
| 10 / second: | centuries | (unthrottled online attack) |
| 10k / second: | centuries | (offline attack, slow hash, many cores) |
| 10B / second: | centuries | (offline attack, fast hash, many cores) |
| match sequence: | ||
| 'Why' | |
| pattern: | dictionary |
| guesses_log10: | 1.98227 |
| dictionary_name: | us_tv_and_film |
| rank: | 48 |
| reversed: | false |
| base-guesses: | 48 |
| uppercase-variations: | 2 |
| l33t-variations: | 1 |
| 'fault' | |
| pattern: | dictionary |
| guesses_log10: | 2.63849 |
| dictionary_name: | us_tv_and_film |
| rank: | 435 |
| reversed: | false |
| base-guesses: | 435 |
| uppercase-variations: | 1 |
| l33t-variations: | 1 |
| 'the' | |
| pattern: | dictionary |
| guesses_log10: | 1.69897 |
| dictionary_name: | english_wikipedia |
| rank: | 1 |
| reversed: | false |
| base-guesses: | 1 |
| uppercase-variations: | 1 |
| l33t-variations: | 1 |
| 'bardifhesingst' | |
| pattern: | bruteforce |
| guesses_log10: | 14 |
| 'heAr' | |
| pattern: | dictionary |
| guesses_log10: | 2.8169 |
| dictionary_name: | us_tv_and_film |
| rank: | 164 |
| reversed: | false |
| base-guesses: | 164 |
| uppercase-variations: | 4 |
| l33t-variations: | 1 |
| 'gives' | |
| pattern: | dictionary |
| guesses_log10: | 2.9154 |
| dictionary_name: | us_tv_and_film |
| rank: | 823 |
| reversed: | false |
| base-guesses: | 823 |
| uppercase-variations: | 1 |
| l33t-variations: | 1 |
| '’harshfate?' | |
| pattern: | bruteforce |
| guesses_log10: | 11 |
| password: | Eupithes’sonAntinousbroketheirsilence | |
| guesses_log10: | 29.048 | |
| score: | 4 / 4 | |
| function runtime (ms): | 5 | |
| guess times: | ||
| 100 / hour: | centuries | (throttled online attack) |
| 10 / second: | centuries | (unthrottled online attack) |
| 10k / second: | centuries | (offline attack, slow hash, many cores) |
| 10B / second: | centuries | (offline attack, fast hash, many cores) |
| match sequence: | ||
| 'Eupithes’sonAntinous' | |
| pattern: | bruteforce |
| guesses_log10: | 20 |
| 'broke' | |
| pattern: | dictionary |
| guesses_log10: | 2.74351 |
| dictionary_name: | us_tv_and_film |
| rank: | 554 |
| reversed: | false |
| base-guesses: | 554 |
| uppercase-variations: | 1 |
| l33t-variations: | 1 |
| 'their' | |
| pattern: | dictionary |
| guesses_log10: | 1.69897 |
| dictionary_name: | english_wikipedia |
| rank: | 28 |
| reversed: | false |
| base-guesses: | 28 |
| uppercase-variations: | 1 |
| l33t-variations: | 1 |
| 'silence' | |
| pattern: | dictionary |
| guesses_log10: | 3.22531 |
| dictionary_name: | us_tv_and_film |
| rank: | 1680 |
| reversed: | false |
| base-guesses: | 1680 |
| uppercase-variations: | 1 |
| l33t-variations: | 1 |
| password: | Athena lavished a marvelous splendor | |
| guesses_log10: | 24.18462 | |
| score: | 4 / 4 | |
| function runtime (ms): | 3 | |
| guess times: | ||
| 100 / hour: | centuries | (throttled online attack) |
| 10 / second: | centuries | (unthrottled online attack) |
| 10k / second: | centuries | (offline attack, slow hash, many cores) |
| 10B / second: | centuries | (offline attack, fast hash, many cores) |
| match sequence: | ||
| 'Athena' | |
| pattern: | dictionary |
| guesses_log10: | 3.32387 |
| dictionary_name: | female_names |
| rank: | 1054 |
| reversed: | false |
| base-guesses: | 1054 |
| uppercase-variations: | 2 |
| l33t-variations: | 1 |
| ' ' | |
| pattern: | bruteforce |
| guesses_log10: | 1.04139 |
| 'lavished' | |
| pattern: | dictionary |
| guesses_log10: | 4.23378 |
| dictionary_name: | us_tv_and_film |
| rank: | 17131 |
| reversed: | false |
| base-guesses: | 17131 |
| uppercase-variations: | 1 |
| l33t-variations: | 1 |
| ' a ' | |
| pattern: | bruteforce |
| guesses_log10: | 3 |
| 'marvelous' | |
| pattern: | dictionary |
| guesses_log10: | 3.45423 |
| dictionary_name: | us_tv_and_film |
| rank: | 2846 |
| reversed: | false |
| base-guesses: | 2846 |
| uppercase-variations: | 1 |
| l33t-variations: | 1 |
| ' ' | |
| pattern: | bruteforce |
| guesses_log10: | 1.04139 |
| 'splendor' | |
| pattern: | dictionary |
| guesses_log10: | 3.92696 |
| dictionary_name: | us_tv_and_film |
| rank: | 8452 |
| reversed: | false |
| base-guesses: | 8452 |
| uppercase-variations: | 1 |
| l33t-variations: | 1 |
| password: | buckmulliganstenderchant | |
| guesses_log10: | 16.69761 | |
| score: | 4 / 4 | |
| function runtime (ms): | 2 | |
| guess times: | ||
| 100 / hour: | centuries | (throttled online attack) |
| 10 / second: | centuries | (unthrottled online attack) |
| 10k / second: | centuries | (offline attack, slow hash, many cores) |
| 10B / second: | 2 months | (offline attack, fast hash, many cores) |
| match sequence: | ||
| 'buck' | |
| pattern: | dictionary |
| guesses_log10: | 2.81757 |
| dictionary_name: | surnames |
| rank: | 657 |
| reversed: | false |
| base-guesses: | 657 |
| uppercase-variations: | 1 |
| l33t-variations: | 1 |
| 'mulligan' | |
| pattern: | dictionary |
| guesses_log10: | 3.38578 |
| dictionary_name: | surnames |
| rank: | 2431 |
| reversed: | false |
| base-guesses: | 2431 |
| uppercase-variations: | 1 |
| l33t-variations: | 1 |
| 's' | |
| pattern: | bruteforce |
| guesses_log10: | 1.04139 |
| 'tender' | |
| pattern: | dictionary |
| guesses_log10: | 3.46553 |
| dictionary_name: | us_tv_and_film |
| rank: | 2921 |
| reversed: | false |
| base-guesses: | 2921 |
| uppercase-variations: | 1 |
| l33t-variations: | 1 |
| 'chant' | |
| pattern: | dictionary |
| guesses_log10: | 3.8109 |
| dictionary_name: | us_tv_and_film |
| rank: | 6470 |
| reversed: | false |
| base-guesses: | 6470 |
| uppercase-variations: | 1 |
| l33t-variations: | 1 |
| password: | seethenthatyewalkcircumspectly | |
| guesses_log10: | 25.57054 | |
| score: | 4 / 4 | |
| function runtime (ms): | 3 | |
| guess times: | ||
| 100 / hour: | centuries | (throttled online attack) |
| 10 / second: | centuries | (unthrottled online attack) |
| 10k / second: | centuries | (offline attack, slow hash, many cores) |
| 10B / second: | centuries | (offline attack, fast hash, many cores) |
| match sequence: | ||
| 'see' | |
| pattern: | dictionary |
| guesses_log10: | 1.69897 |
| dictionary_name: | us_tv_and_film |
| rank: | 49 |
| reversed: | false |
| base-guesses: | 49 |
| uppercase-variations: | 1 |
| l33t-variations: | 1 |
| 'then' | |
| pattern: | dictionary |
| guesses_log10: | 1.79239 |
| dictionary_name: | english_wikipedia |
| rank: | 62 |
| reversed: | false |
| base-guesses: | 62 |
| uppercase-variations: | 1 |
| l33t-variations: | 1 |
| 'that' | |
| pattern: | dictionary |
| guesses_log10: | 1.69897 |
| dictionary_name: | us_tv_and_film |
| rank: | 4 |
| reversed: | false |
| base-guesses: | 4 |
| uppercase-variations: | 1 |
| l33t-variations: | 1 |
| 'yewalkcircumspectly' | |
| pattern: | bruteforce |
| guesses_log10: | 19 |
| password: | LihiandthepeopleofMorianton | |
| guesses_log10: | 21.44647 | |
| score: | 4 / 4 | |
| function runtime (ms): | 2 | |
| guess times: | ||
| 100 / hour: | centuries | (throttled online attack) |
| 10 / second: | centuries | (unthrottled online attack) |
| 10k / second: | centuries | (offline attack, slow hash, many cores) |
| 10B / second: | centuries | (offline attack, fast hash, many cores) |
| match sequence: | ||
| 'Lihiand' | |
| pattern: | bruteforce |
| guesses_log10: | 7 |
| 'the' | |
| pattern: | dictionary |
| guesses_log10: | 1.69897 |
| dictionary_name: | english_wikipedia |
| rank: | 1 |
| reversed: | false |
| base-guesses: | 1 |
| uppercase-variations: | 1 |
| l33t-variations: | 1 |
| 'people' | |
| pattern: | dictionary |
| guesses_log10: | 1.96848 |
| dictionary_name: | english_wikipedia |
| rank: | 93 |
| reversed: | false |
| base-guesses: | 93 |
| uppercase-variations: | 1 |
| l33t-variations: | 1 |
| 'ofMori' | |
| pattern: | bruteforce |
| guesses_log10: | 6 |
| 'anton' | |
| pattern: | dictionary |
| guesses_log10: | 2.69984 |
| dictionary_name: | male_names |
| rank: | 501 |
| reversed: | false |
| base-guesses: | 501 |
| uppercase-variations: | 1 |
| l33t-variations: | 1 |
| password: | establishedinthecityofZarahemla | |
| guesses_log10: | 21.51744 | |
| score: | 4 / 4 | |
| function runtime (ms): | 4 | |
| guess times: | ||
| 100 / hour: | centuries | (throttled online attack) |
| 10 / second: | centuries | (unthrottled online attack) |
| 10k / second: | centuries | (offline attack, slow hash, many cores) |
| 10B / second: | centuries | (offline attack, fast hash, many cores) |
| match sequence: | ||
| 'established' | |
| pattern: | dictionary |
| guesses_log10: | 2.40483 |
| dictionary_name: | english_wikipedia |
| rank: | 254 |
| reversed: | false |
| base-guesses: | 254 |
| uppercase-variations: | 1 |
| l33t-variations: | 1 |
| 'inthe' | |
| pattern: | bruteforce |
| guesses_log10: | 5 |
| 'city' | |
| pattern: | dictionary |
| guesses_log10: | 1.73239 |
| dictionary_name: | english_wikipedia |
| rank: | 54 |
| reversed: | false |
| base-guesses: | 54 |
| uppercase-variations: | 1 |
| l33t-variations: | 1 |
| 'ofZarahemla' | |
| pattern: | bruteforce |
| guesses_log10: | 11 |
| password: | !"£$%^&*() | |
| guesses_log10: | 7.01611 | |
| score: | 2 / 4 | |
| function runtime (ms): | 0 | |
| guess times: | ||
| 100 / hour: | 12 years | (throttled online attack) |
| 10 / second: | 12 days | (unthrottled online attack) |
| 10k / second: | 17 minutes | (offline attack, slow hash, many cores) |
| 10B / second: | less than a second | (offline attack, fast hash, many cores) |
| warning: | Straight rows of keys are easy to guess | |
| suggestions: |
- Add another word or two. Uncommon words are better. - Use a longer keyboard pattern with more turns |
|
| match sequence: | ||
| '!"£' | |
| pattern: | bruteforce |
| guesses_log10: | 3 |
| '$%^&*()' | |
| pattern: | spatial |
| guesses_log10: | 3.71466 |
| graph: | qwerty |
| turns: | 1 |
| shifted count: | 7 |
| password: | D0g.................. | |
| guesses_log10: | 5.64542 | |
| score: | 1 / 4 | |
| function runtime (ms): | 1 | |
| guess times: | ||
| 100 / hour: | 6 months | (throttled online attack) |
| 10 / second: | 12 hours | (unthrottled online attack) |
| 10k / second: | 44 seconds | (offline attack, slow hash, many cores) |
| 10B / second: | less than a second | (offline attack, fast hash, many cores) |
| warning: | Repeats like "aaa" are easy to guess | |
| suggestions: |
- Add another word or two. Uncommon words are better. - Avoid repeated words and characters |
|
| match sequence: | ||
| 'D0g' | |
| pattern: | bruteforce |
| guesses_log10: | 3 |
| '..................' | |
| pattern: | repeat |
| guesses_log10: | 2.33445 |
| base_token: | '.' |
| base_guesses: | 12 |
| num_repeats: | 18 |
| password: | abcdefghijk987654321 | |
| guesses_log10: | 4.17609 | |
| score: | 1 / 4 | |
| function runtime (ms): | 3 | |
| guess times: | ||
| 100 / hour: | 6 days | (throttled online attack) |
| 10 / second: | 25 minutes | (unthrottled online attack) |
| 10k / second: | 2 seconds | (offline attack, slow hash, many cores) |
| 10B / second: | less than a second | (offline attack, fast hash, many cores) |
| warning: | Sequences like abc or 6543 are easy to guess | |
| suggestions: |
- Add another word or two. Uncommon words are better. - Avoid sequences |
|
| match sequence: | ||
| 'abcdefghijk' | |
| pattern: | sequence |
| guesses_log10: | 1.69897 |
| sequence-name: | lower |
| sequence-size | 26 |
| ascending: | true |
| '987654321' | |
| pattern: | dictionary |
| guesses_log10: | 1.69897 |
| dictionary_name: | passwords |
| rank: | 5 |
| reversed: | true |
| base-guesses: | 5 |
| uppercase-variations: | 1 |
| l33t-variations: | 1 |
| password: | neverforget13/3/1997 | |
| guesses_log10: | 9.62895 | |
| score: | 3 / 4 | |
| function runtime (ms): | 3 | |
| guess times: | ||
| 100 / hour: | centuries | (throttled online attack) |
| 10 / second: | 13 years | (unthrottled online attack) |
| 10k / second: | 5 days | (offline attack, slow hash, many cores) |
| 10B / second: | less than a second | (offline attack, fast hash, many cores) |
| match sequence: | ||
| 'never' | |
| pattern: | dictionary |
| guesses_log10: | 1.87506 |
| dictionary_name: | us_tv_and_film |
| rank: | 75 |
| reversed: | false |
| base-guesses: | 75 |
| uppercase-variations: | 1 |
| l33t-variations: | 1 |
| 'forget' | |
| pattern: | dictionary |
| guesses_log10: | 2.40312 |
| dictionary_name: | us_tv_and_film |
| rank: | 253 |
| reversed: | false |
| base-guesses: | 253 |
| uppercase-variations: | 1 |
| l33t-variations: | 1 |
| '13/3/1997' | |
| pattern: | date |
| guesses_log10: | 4.56229 |
| day: | 13 |
| month: | 3 |
| year: | 1997 |
| separator: | '/' |
| password: | 1qaz2wsx3edc | |
| guesses_log10: | 3.00043 | |
| score: | 0 / 4 | |
| function runtime (ms): | 0 | |
| guess times: | ||
| 100 / hour: | 10 hours | (throttled online attack) |
| 10 / second: | 2 minutes | (unthrottled online attack) |
| 10k / second: | less than a second | (offline attack, slow hash, many cores) |
| 10B / second: | less than a second | (offline attack, fast hash, many cores) |
| warning: | This is a very common password | |
| suggestions: |
- Add another word or two. Uncommon words are better. |
|
| match sequence: | ||
| '1qaz2wsx3edc' | |
| pattern: | dictionary |
| guesses_log10: | 3 |
| dictionary_name: | passwords |
| rank: | 1000 |
| reversed: | false |
| base-guesses: | 1000 |
| uppercase-variations: | 1 |
| l33t-variations: | 1 |
| password: | temppass22 | |
| guesses_log10: | 5.58827 | |
| score: | 1 / 4 | |
| function runtime (ms): | 1 | |
| guess times: | ||
| 100 / hour: | 5 months | (throttled online attack) |
| 10 / second: | 11 hours | (unthrottled online attack) |
| 10k / second: | 39 seconds | (offline attack, slow hash, many cores) |
| 10B / second: | less than a second | (offline attack, fast hash, many cores) |
| warning: | This is similar to a commonly used password | |
| suggestions: |
- Add another word or two. Uncommon words are better. |
|
| match sequence: | ||
| 'temppass' | |
| pattern: | dictionary |
| guesses_log10: | 3.57692 |
| dictionary_name: | passwords |
| rank: | 3775 |
| reversed: | false |
| base-guesses: | 3775 |
| uppercase-variations: | 1 |
| l33t-variations: | 1 |
| '22' | |
| pattern: | repeat |
| guesses_log10: | 1.69897 |
| base_token: | '2' |
| base_guesses: | 12 |
| num_repeats: | 2 |
| password: | briansmith | |
| guesses_log10: | 4.17609 | |
| score: | 1 / 4 | |
| function runtime (ms): | 0 | |
| guess times: | ||
| 100 / hour: | 6 days | (throttled online attack) |
| 10 / second: | 25 minutes | (unthrottled online attack) |
| 10k / second: | 2 seconds | (offline attack, slow hash, many cores) |
| 10B / second: | less than a second | (offline attack, fast hash, many cores) |
| warning: | Common names and surnames are easy to guess | |
| suggestions: |
- Add another word or two. Uncommon words are better. |
|
| match sequence: | ||
| 'brian' | |
| pattern: | dictionary |
| guesses_log10: | 1.69897 |
| dictionary_name: | male_names |
| rank: | 20 |
| reversed: | false |
| base-guesses: | 20 |
| uppercase-variations: | 1 |
| l33t-variations: | 1 |
| 'smith' | |
| pattern: | dictionary |
| guesses_log10: | 1.69897 |
| dictionary_name: | surnames |
| rank: | 1 |
| reversed: | false |
| base-guesses: | 1 |
| uppercase-variations: | 1 |
| l33t-variations: | 1 |
| password: | briansmith4mayor | |
| guesses_log10: | 10.17898 | |
| score: | 4 / 4 | |
| function runtime (ms): | 1 | |
| guess times: | ||
| 100 / hour: | centuries | (throttled online attack) |
| 10 / second: | 47 years | (unthrottled online attack) |
| 10k / second: | 17 days | (offline attack, slow hash, many cores) |
| 10B / second: | 2 seconds | (offline attack, fast hash, many cores) |
| match sequence: | ||
| 'brian' | |
| pattern: | dictionary |
| guesses_log10: | 1.69897 |
| dictionary_name: | male_names |
| rank: | 20 |
| reversed: | false |
| base-guesses: | 20 |
| uppercase-variations: | 1 |
| l33t-variations: | 1 |
| 'smith' | |
| pattern: | dictionary |
| guesses_log10: | 1.69897 |
| dictionary_name: | surnames |
| rank: | 1 |
| reversed: | false |
| base-guesses: | 1 |
| uppercase-variations: | 1 |
| l33t-variations: | 1 |
| '4mayor' | |
| pattern: | bruteforce |
| guesses_log10: | 6 |
| password: | password1 | |
| guesses_log10: | 2.27875 | |
| score: | 0 / 4 | |
| function runtime (ms): | 1 | |
| guess times: | ||
| 100 / hour: | 2 hours | (throttled online attack) |
| 10 / second: | 19 seconds | (unthrottled online attack) |
| 10k / second: | less than a second | (offline attack, slow hash, many cores) |
| 10B / second: | less than a second | (offline attack, fast hash, many cores) |
| warning: | This is a very common password | |
| suggestions: |
- Add another word or two. Uncommon words are better. |
|
| match sequence: | ||
| 'password1' | |
| pattern: | dictionary |
| guesses_log10: | 2.27646 |
| dictionary_name: | passwords |
| rank: | 189 |
| reversed: | false |
| base-guesses: | 189 |
| uppercase-variations: | 1 |
| l33t-variations: | 1 |
| password: | viking | |
| guesses_log10: | 2.38739 | |
| score: | 0 / 4 | |
| function runtime (ms): | 0 | |
| guess times: | ||
| 100 / hour: | 2 hours | (throttled online attack) |
| 10 / second: | 24 seconds | (unthrottled online attack) |
| 10k / second: | less than a second | (offline attack, slow hash, many cores) |
| 10B / second: | less than a second | (offline attack, fast hash, many cores) |
| warning: | This is a very common password | |
| suggestions: |
- Add another word or two. Uncommon words are better. |
|
| match sequence: | ||
| 'viking' | |
| pattern: | dictionary |
| guesses_log10: | 2.38561 |
| dictionary_name: | passwords |
| rank: | 243 |
| reversed: | false |
| base-guesses: | 243 |
| uppercase-variations: | 1 |
| l33t-variations: | 1 |
| password: | thx1138 | |
| guesses_log10: | 2.32015 | |
| score: | 0 / 4 | |
| function runtime (ms): | 0 | |
| guess times: | ||
| 100 / hour: | 2 hours | (throttled online attack) |
| 10 / second: | 21 seconds | (unthrottled online attack) |
| 10k / second: | less than a second | (offline attack, slow hash, many cores) |
| 10B / second: | less than a second | (offline attack, fast hash, many cores) |
| warning: | This is a very common password | |
| suggestions: |
- Add another word or two. Uncommon words are better. |
|
| match sequence: | ||
| 'thx1138' | |
| pattern: | dictionary |
| guesses_log10: | 2.31806 |
| dictionary_name: | passwords |
| rank: | 208 |
| reversed: | false |
| base-guesses: | 208 |
| uppercase-variations: | 1 |
| l33t-variations: | 1 |
| password: | ScoRpi0ns | |
| guesses_log10: | 5.46189 | |
| score: | 1 / 4 | |
| function runtime (ms): | 1 | |
| guess times: | ||
| 100 / hour: | 4 months | (throttled online attack) |
| 10 / second: | 8 hours | (unthrottled online attack) |
| 10k / second: | 29 seconds | (offline attack, slow hash, many cores) |
| 10B / second: | less than a second | (offline attack, fast hash, many cores) |
| suggestions: |
- Add another word or two. Uncommon words are better. - Predictable substitutions like '@' instead of 'a' don't help very much |
|
| match sequence: | ||
| 'ScoRpi0n' | |
| pattern: | dictionary |
| guesses_log10: | 4.10421 |
| dictionary_name: | passwords |
| rank: | 227 |
| reversed: | false |
| l33t subs: | 0 -> o |
| un-l33ted: | scorpion |
| base-guesses: | 227 |
| uppercase-variations: | 28 |
| l33t-variations: | 2 |
| 's' | |
| pattern: | bruteforce |
| guesses_log10: | 1.04139 |
| password: | do you know | |
| guesses_log10: | 9 | |
| score: | 3 / 4 | |
| function runtime (ms): | 0 | |
| guess times: | ||
| 100 / hour: | centuries | (throttled online attack) |
| 10 / second: | 3 years | (unthrottled online attack) |
| 10k / second: | 1 day | (offline attack, slow hash, many cores) |
| 10B / second: | less than a second | (offline attack, fast hash, many cores) |
| match sequence: | ||
| 'do you ' | |
| pattern: | bruteforce |
| guesses_log10: | 7 |
| 'know' | |
| pattern: | dictionary |
| guesses_log10: | 1.69897 |
| dictionary_name: | us_tv_and_film |
| rank: | 9 |
| reversed: | false |
| base-guesses: | 9 |
| uppercase-variations: | 1 |
| l33t-variations: | 1 |
| password: | ryanhunter2000 | |
| guesses_log10: | 8.00325 | |
| score: | 3 / 4 | |
| function runtime (ms): | 1 | |
| guess times: | ||
| 100 / hour: | centuries | (throttled online attack) |
| 10 / second: | 4 months | (unthrottled online attack) |
| 10k / second: | 3 hours | (offline attack, slow hash, many cores) |
| 10B / second: | less than a second | (offline attack, fast hash, many cores) |
| match sequence: | ||
| 'ryan' | |
| pattern: | dictionary |
| guesses_log10: | 1.69897 |
| dictionary_name: | male_names |
| rank: | 49 |
| reversed: | false |
| base-guesses: | 49 |
| uppercase-variations: | 1 |
| l33t-variations: | 1 |
| 'hunter' | |
| pattern: | dictionary |
| guesses_log10: | 1.69897 |
| dictionary_name: | passwords |
| rank: | 37 |
| reversed: | false |
| base-guesses: | 37 |
| uppercase-variations: | 1 |
| l33t-variations: | 1 |
| '2000' | |
| pattern: | regex |
| guesses_log10: | 1.69897 |
| regex_name: | recent_year |
| password: | rianhunter2000 | |
| guesses_log10: | 8.39794 | |
| score: | 3 / 4 | |
| function runtime (ms): | 1 | |
| guess times: | ||
| 100 / hour: | centuries | (throttled online attack) |
| 10 / second: | 9 months | (unthrottled online attack) |
| 10k / second: | 7 hours | (offline attack, slow hash, many cores) |
| 10B / second: | less than a second | (offline attack, fast hash, many cores) |
| match sequence: | ||
| 'rian' | |
| pattern: | bruteforce |
| guesses_log10: | 4 |
| 'hunter' | |
| pattern: | dictionary |
| guesses_log10: | 1.69897 |
| dictionary_name: | passwords |
| rank: | 37 |
| reversed: | false |
| base-guesses: | 37 |
| uppercase-variations: | 1 |
| l33t-variations: | 1 |
| '2000' | |
| pattern: | regex |
| guesses_log10: | 1.69897 |
| regex_name: | recent_year |
| password: | asdfghju7654rewq | |
| guesses_log10: | 8.96529 | |
| score: | 3 / 4 | |
| function runtime (ms): | 1 | |
| guess times: | ||
| 100 / hour: | centuries | (throttled online attack) |
| 10 / second: | 3 years | (unthrottled online attack) |
| 10k / second: | 1 day | (offline attack, slow hash, many cores) |
| 10B / second: | less than a second | (offline attack, fast hash, many cores) |
| match sequence: | ||
| 'asdfghju7654rewq' | |
| pattern: | spatial |
| guesses_log10: | 8.96529 |
| graph: | qwerty |
| turns: | 5 |
| shifted count: | 0 |
| password: | AOEUIDHG&*()LS_ | |
| guesses_log10: | 9.10726 | |
| score: | 3 / 4 | |
| function runtime (ms): | 1 | |
| guess times: | ||
| 100 / hour: | centuries | (throttled online attack) |
| 10 / second: | 4 years | (unthrottled online attack) |
| 10k / second: | 1 day | (offline attack, slow hash, many cores) |
| 10B / second: | less than a second | (offline attack, fast hash, many cores) |
| match sequence: | ||
| 'AOEUIDHG&*()LS_' | |
| pattern: | spatial |
| guesses_log10: | 9.10726 |
| graph: | dvorak |
| turns: | 5 |
| shifted count: | 15 |
| password: | 12345678 | |
| guesses_log10: | 0.60206 | |
| score: | 0 / 4 | |
| function runtime (ms): | 1 | |
| guess times: | ||
| 100 / hour: | 2 minutes | (throttled online attack) |
| 10 / second: | less than a second | (unthrottled online attack) |
| 10k / second: | less than a second | (offline attack, slow hash, many cores) |
| 10B / second: | less than a second | (offline attack, fast hash, many cores) |
| warning: | This is a top-10 common password | |
| suggestions: |
- Add another word or two. Uncommon words are better. |
|
| match sequence: | ||
| '12345678' | |
| pattern: | dictionary |
| guesses_log10: | 0.47712 |
| dictionary_name: | passwords |
| rank: | 3 |
| reversed: | false |
| base-guesses: | 3 |
| uppercase-variations: | 1 |
| l33t-variations: | 1 |
| password: | defghi6789 | |
| guesses_log10: | 4.40824 | |
| score: | 1 / 4 | |
| function runtime (ms): | 0 | |
| guess times: | ||
| 100 / hour: | 11 days | (throttled online attack) |
| 10 / second: | 43 minutes | (unthrottled online attack) |
| 10k / second: | 3 seconds | (offline attack, slow hash, many cores) |
| 10B / second: | less than a second | (offline attack, fast hash, many cores) |
| warning: | Sequences like abc or 6543 are easy to guess | |
| suggestions: |
- Add another word or two. Uncommon words are better. - Avoid sequences |
|
| match sequence: | ||
| 'defghi' | |
| pattern: | sequence |
| guesses_log10: | 2.19312 |
| sequence-name: | lower |
| sequence-size | 26 |
| ascending: | true |
| '6789' | |
| pattern: | sequence |
| guesses_log10: | 1.69897 |
| sequence-name: | digits |
| sequence-size | 10 |
| ascending: | true |
| password: | rosebud | |
| guesses_log10: | 2.43457 | |
| score: | 0 / 4 | |
| function runtime (ms): | 1 | |
| guess times: | ||
| 100 / hour: | 3 hours | (throttled online attack) |
| 10 / second: | 27 seconds | (unthrottled online attack) |
| 10k / second: | less than a second | (offline attack, slow hash, many cores) |
| 10B / second: | less than a second | (offline attack, fast hash, many cores) |
| warning: | This is a very common password | |
| suggestions: |
- Add another word or two. Uncommon words are better. |
|
| match sequence: | ||
| 'rosebud' | |
| pattern: | dictionary |
| guesses_log10: | 2.43297 |
| dictionary_name: | passwords |
| rank: | 271 |
| reversed: | false |
| base-guesses: | 271 |
| uppercase-variations: | 1 |
| l33t-variations: | 1 |
| password: | Rosebud | |
| guesses_log10: | 2.7348 | |
| score: | 0 / 4 | |
| function runtime (ms): | 0 | |
| guess times: | ||
| 100 / hour: | 5 hours | (throttled online attack) |
| 10 / second: | 54 seconds | (unthrottled online attack) |
| 10k / second: | less than a second | (offline attack, slow hash, many cores) |
| 10B / second: | less than a second | (offline attack, fast hash, many cores) |
| warning: | This is a very common password | |
| suggestions: |
- Add another word or two. Uncommon words are better. - Capitalization doesn't help very much |
|
| match sequence: | ||
| 'Rosebud' | |
| pattern: | dictionary |
| guesses_log10: | 2.734 |
| dictionary_name: | passwords |
| rank: | 271 |
| reversed: | false |
| base-guesses: | 271 |
| uppercase-variations: | 2 |
| l33t-variations: | 1 |
| password: | ROSEBUD | |
| guesses_log10: | 2.7348 | |
| score: | 0 / 4 | |
| function runtime (ms): | 0 | |
| guess times: | ||
| 100 / hour: | 5 hours | (throttled online attack) |
| 10 / second: | 54 seconds | (unthrottled online attack) |
| 10k / second: | less than a second | (offline attack, slow hash, many cores) |
| 10B / second: | less than a second | (offline attack, fast hash, many cores) |
| warning: | This is a very common password | |
| suggestions: |
- Add another word or two. Uncommon words are better. - All-uppercase is almost as easy to guess as all-lowercase |
|
| match sequence: | ||
| 'ROSEBUD' | |
| pattern: | dictionary |
| guesses_log10: | 2.734 |
| dictionary_name: | passwords |
| rank: | 271 |
| reversed: | false |
| base-guesses: | 271 |
| uppercase-variations: | 2 |
| l33t-variations: | 1 |
| password: | rosebuD | |
| guesses_log10: | 2.7348 | |
| score: | 0 / 4 | |
| function runtime (ms): | 0 | |
| guess times: | ||
| 100 / hour: | 5 hours | (throttled online attack) |
| 10 / second: | 54 seconds | (unthrottled online attack) |
| 10k / second: | less than a second | (offline attack, slow hash, many cores) |
| 10B / second: | less than a second | (offline attack, fast hash, many cores) |
| warning: | This is a very common password | |
| suggestions: |
- Add another word or two. Uncommon words are better. |
|
| match sequence: | ||
| 'rosebuD' | |
| pattern: | dictionary |
| guesses_log10: | 2.734 |
| dictionary_name: | passwords |
| rank: | 271 |
| reversed: | false |
| base-guesses: | 271 |
| uppercase-variations: | 2 |
| l33t-variations: | 1 |
| password: | ros3bud99 | |
| guesses_log10: | 4.80754 | |
| score: | 1 / 4 | |
| function runtime (ms): | 1 | |
| guess times: | ||
| 100 / hour: | 27 days | (throttled online attack) |
| 10 / second: | 2 hours | (unthrottled online attack) |
| 10k / second: | 6 seconds | (offline attack, slow hash, many cores) |
| 10B / second: | less than a second | (offline attack, fast hash, many cores) |
| warning: | This is similar to a commonly used password | |
| suggestions: |
- Add another word or two. Uncommon words are better. - Predictable substitutions like '@' instead of 'a' don't help very much |
|
| match sequence: | ||
| 'ros3bud' | |
| pattern: | dictionary |
| guesses_log10: | 2.734 |
| dictionary_name: | passwords |
| rank: | 271 |
| reversed: | false |
| l33t subs: | 3 -> e |
| un-l33ted: | rosebud |
| base-guesses: | 271 |
| uppercase-variations: | 1 |
| l33t-variations: | 2 |
| '99' | |
| pattern: | repeat |
| guesses_log10: | 1.69897 |
| base_token: | '9' |
| base_guesses: | 12 |
| num_repeats: | 2 |
| password: | r0s3bud99 | |
| guesses_log10: | 5.07335 | |
| score: | 1 / 4 | |
| function runtime (ms): | 0 | |
| guess times: | ||
| 100 / hour: | 2 months | (throttled online attack) |
| 10 / second: | 3 hours | (unthrottled online attack) |
| 10k / second: | 12 seconds | (offline attack, slow hash, many cores) |
| 10B / second: | less than a second | (offline attack, fast hash, many cores) |
| warning: | This is similar to a commonly used password | |
| suggestions: |
- Add another word or two. Uncommon words are better. - Predictable substitutions like '@' instead of 'a' don't help very much |
|
| match sequence: | ||
| 'r0s3bud' | |
| pattern: | dictionary |
| guesses_log10: | 3.03503 |
| dictionary_name: | passwords |
| rank: | 271 |
| reversed: | false |
| l33t subs: | 0 -> o, 3 -> e |
| un-l33ted: | rosebud |
| base-guesses: | 271 |
| uppercase-variations: | 1 |
| l33t-variations: | 4 |
| '99' | |
| pattern: | repeat |
| guesses_log10: | 1.69897 |
| base_token: | '9' |
| base_guesses: | 12 |
| num_repeats: | 2 |
| password: | R0$38uD99 | |
| guesses_log10: | 6.11754 | |
| score: | 2 / 4 | |
| function runtime (ms): | 1 | |
| guess times: | ||
| 100 / hour: | 1 year | (throttled online attack) |
| 10 / second: | 2 days | (unthrottled online attack) |
| 10k / second: | 2 minutes | (offline attack, slow hash, many cores) |
| 10B / second: | less than a second | (offline attack, fast hash, many cores) |
| suggestions: |
- Add another word or two. Uncommon words are better. - Predictable substitutions like '@' instead of 'a' don't help very much |
|
| match sequence: | ||
| 'R0$38uD' | |
| pattern: | dictionary |
| guesses_log10: | 4.11421 |
| dictionary_name: | passwords |
| rank: | 271 |
| reversed: | false |
| l33t subs: | 0 -> o, 3 -> e, 8 -> b, $ -> s |
| un-l33ted: | rosebud |
| base-guesses: | 271 |
| uppercase-variations: | 3 |
| l33t-variations: | 16 |
| '99' | |
| pattern: | repeat |
| guesses_log10: | 1.69897 |
| base_token: | '9' |
| base_guesses: | 12 |
| num_repeats: | 2 |
| password: | verlineVANDERMARK | |
| guesses_log10: | 10.38918 | |
| score: | 4 / 4 | |
| function runtime (ms): | 0 | |
| guess times: | ||
| 100 / hour: | centuries | (throttled online attack) |
| 10 / second: | 76 years | (unthrottled online attack) |
| 10k / second: | 28 days | (offline attack, slow hash, many cores) |
| 10B / second: | 2 seconds | (offline attack, fast hash, many cores) |
| match sequence: | ||
| 'verline' | |
| pattern: | dictionary |
| guesses_log10: | 3.56038 |
| dictionary_name: | female_names |
| rank: | 3634 |
| reversed: | false |
| base-guesses: | 3634 |
| uppercase-variations: | 1 |
| l33t-variations: | 1 |
| 'VANDER' | |
| pattern: | dictionary |
| guesses_log10: | 4.3499 |
| dictionary_name: | passwords |
| rank: | 11191 |
| reversed: | false |
| base-guesses: | 11191 |
| uppercase-variations: | 2 |
| l33t-variations: | 1 |
| 'MARK' | |
| pattern: | dictionary |
| guesses_log10: | 1.69897 |
| dictionary_name: | male_names |
| rank: | 14 |
| reversed: | false |
| base-guesses: | 14 |
| uppercase-variations: | 2 |
| l33t-variations: | 1 |
| password: | eheuczkqyq | |
| guesses_log10: | 10 | |
| score: | 3 / 4 | |
| function runtime (ms): | 1 | |
| guess times: | ||
| 100 / hour: | centuries | (throttled online attack) |
| 10 / second: | 31 years | (unthrottled online attack) |
| 10k / second: | 12 days | (offline attack, slow hash, many cores) |
| 10B / second: | 1 second | (offline attack, fast hash, many cores) |
| match sequence: | ||
| 'eheuczkqyq' | |
| pattern: | bruteforce |
| guesses_log10: | 10 |
| password: | rWibMFACxAUGZmxhVncy | |
| guesses_log10: | 20 | |
| score: | 4 / 4 | |
| function runtime (ms): | 1 | |
| guess times: | ||
| 100 / hour: | centuries | (throttled online attack) |
| 10 / second: | centuries | (unthrottled online attack) |
| 10k / second: | centuries | (offline attack, slow hash, many cores) |
| 10B / second: | centuries | (offline attack, fast hash, many cores) |
| match sequence: | ||
| 'rWibMFACxAUGZmxhVncy' | |
| pattern: | bruteforce |
| guesses_log10: | 20 |
| password: | Ba9ZyWABu99[BK#6MBgbH88Tofv)vs$w | |
| guesses_log10: | 32 | |
| score: | 4 / 4 | |
| function runtime (ms): | 5 | |
| guess times: | ||
| 100 / hour: | centuries | (throttled online attack) |
| 10 / second: | centuries | (unthrottled online attack) |
| 10k / second: | centuries | (offline attack, slow hash, many cores) |
| 10B / second: | centuries | (offline attack, fast hash, many cores) |
| match sequence: | ||
| 'Ba9ZyWABu99[BK#6MBgbH88Tofv)vs$w' | |
| pattern: | bruteforce |
| guesses_log10: | 32 |