eli5: how does “brute forcing” a password work?

823 views

So I get the more complicated and long the password the harder it is to brute force, but do these programs start with like 111aaa and then go to like 111aab and so forth. Or, are they just trying every combination randomly? If the latter, isn’t there a chance (a very small one) that if it is kinda random that they could break a really good password on like the first try? Similar to winning the lottery? If it’s not random, that has its own issues. I don’t get it. Help.

In: 0

14 Answers

Anonymous 0 Comments

Depending on the cracking program they generally will first run a table of common passwords like “password” “1234567890” ect and if that doesn’t give a valid one then it will start on valid language permutations probably then random character permutations.

An upper/lower case + numbers 8 character password like “dF67WEs3” is going to throw up (26*2+10)*10^8 or about 2.2 trillion.

Which sounds like a lot, but depending on the program and hardware some brute forcing programs can do up to a billion attempts a second. A system with even only million a second guess rate could chug through that 8 character 2.2 trillion permutation password in under a month.

You are viewing 1 out of 14 answers, click here to view all answers.