Nowadays almost every website you want to register in; is asking you to create a complicated password...But why cant we use simple passwords?
I am just wondering because in case of multiple wrong password attempts; many websites and devices nowadays are using lock out system which either locks you out permanently until recovery options are followed OR locks you out for specific period of time...Moreover some websites use captcha to ensure that there is a human being on the other side and not just a tool or script....
If anyone can elaborate on this please....how is it practical (or even possible) for hackers to guess a password with these security measures that are in place....I know it happens because it happened to me. I had a Yahoo email account with a 6 character password (letters and numbers but no special characters or caps) and a hacker managed to gain access to it and started spamming my address book contacts. And I am sure my password was not captured through phishing, social engineering or keylogger.
I am not looking for the exact tools or scripts, I am just looking for what is the idea behind a successful password guess in spite of security measures in place that do not entertain guessing. So for example, even if my password was only letters and was only six characters, how can someone guess my gmail password?