How passwords and logins work: why a website should not know your password
Password hashing algorithms: how a website fights a very fast password cracker
One graphics card can try billions of password guesses a second against a stolen hash. A website cannot make your password longer. But it can make every single guess cost much more.
-
1
The hash function you have seen so far, SHA-256, was built to be fast. On one graphics card, Rono can try about 20 billion guesses a second on your row.
-
2
At that speed, every possible password of 8 small letters and digits, about 3 trillion of them, is tried in under 3 minutes.
The rest of this episode is for subscribers
Subscribe to read every premium episode. You can cancel when you want.
Paid yearly: $99 instead of $119.88