New answers tagged

5 votes

Is a randomly generated 80-bit password strong enough nowadays?

Addressing specifically the question about repeated hashing: Yes, hashing the password repeatedly (i.e. storing H(H(...(H(password))...))) will make the attack proportionally more expensive. The ...
Glenn Willen's user avatar
6 votes

Is a randomly generated 80-bit password strong enough nowadays?

First the simple part A lot of specialized high-performance computing resources worldwide are used for Bitcoin mining. All together they compute about 650 EH/s (different resources like ycharts or ...
mentallurg's user avatar
  • 12.3k
26 votes
Accepted

Is a randomly generated 80-bit password strong enough nowadays?

A random password with 80 bits of entropy is probably out of reach of most brute-force attackers in 2024, except those that are very well funded (e.g. cybergangs, 3-letter agencies, nation states, etc)...
mti2935's user avatar
  • 23.4k
8 votes

Is a randomly generated 80-bit password strong enough nowadays?

If you’re brute forcing it without a database breach then the time depends on how often the front end lets you make a login attempt. A well-designed system will in any case lock the account after let’...
Mike Scott's user avatar
  • 10.3k

Top 50 recent answers are included