I was testing on my own router that how secure is my password. First I set a random 9 digit number as a password but the aircrack-ng was unable to crack it even in 45 minutes and tried other tools like pyrit, crunch but they also didn't work very well. So, what I was wondering is that the password cracking tools are unable to crack a mere 9 digit no. then how can they crack a strong password (combination of upper, lowercase, numbers, special characters) however it may crack the password but it can take days or even years. And the other way is phishing which doesn't work always.
How does password cracking work in the real world?