# How much more difficult does it become to crack a password when appending a 5-digit pin?

I have a quick question regarding password cracking.

So when trying to crack the password using bruteforce or a dictionary you would have to append every possible pin combination on the end for every single attempt.

So in reality how much more difficult would that make it? I'm guessing not much.

• Commented Feb 18, 2016 at 17:02

A 5 digit decimal number has 100,000 possible states, so it increases the time to crack by factor 100,000.

This assumes that the cracker expects you use a common word plus a 5-digit number.

• that's probably not a lot right in terms of password cracking, a factor of 100,000? Commented Feb 18, 2016 at 17:05
• @CBaker that depends completely on how long it takes to crack your password without, which depends heavily on how it is stored. One hour or 12 years makes a lot of difference. One millisecond or one and a half minute not so much. Commented Feb 18, 2016 at 17:07
• Appending a 5 digit number to the end of a password adds log₂(100000) ≃ 16.6 bits of entropy. To prevent even sophisticated off-line brute force attacks is have the entropy of your password generation process should be more than ~80 bits (equal to 38 million computers trying a password every nanosecond for a year). Assuming no underlying flaws like keyloggers or reusing the same passwords at multiple sites (even just once typing password at an evil site), or can't be bribed or threatened to give the pw up for much less than the electricity bill for a year of 38M computers. Commented Feb 18, 2016 at 17:22