eli5: how does “brute forcing” a password work?

795 views

So I get the more complicated and long the password the harder it is to brute force, but do these programs start with like 111aaa and then go to like 111aab and so forth. Or, are they just trying every combination randomly? If the latter, isn’t there a chance (a very small one) that if it is kinda random that they could break a really good password on like the first try? Similar to winning the lottery? If it’s not random, that has its own issues. I don’t get it. Help.

In: 0

14 Answers

Anonymous 0 Comments

There are tons of ways, they’ll often start with the obvious choices like “password” or 123456789 or whatever, but after that, it’s up to them how they want to keep going. They’ll most likely start lower to high though, but that’s just because it takes so much less time to check short passwords.

You could think of it as winning the lottery, but randomly guessing a password is so much less likely than that. Assuming 65 possible characters (all capital and lowercase letters, numbers, 3 symbols) and a password of length 8, you’d have a 1 in 319,00,000,000,000 chance or guessing it right, which makes it about a million times less likely to happen than winning the mega millions lottery.

You are viewing 1 out of 14 answers, click here to view all answers.