
Updating your password to be longer and contain a mix of letters, numbers and symbols can increase the time it takes a hacker to crack it, even as password encryption measures improve, according to IT firm Hive Systems.
The company released its 2024 password table, which shows the time needed to crack a password using the best hardware available to the consumer. The table is updated every year.
Many websites currently require a password of at least eight characters with a mix of letters, numbers or symbols, but we could be in for an upgrade, experts say, as a longer password offers a much larger set of possible combinations for hackers to guess. through.
For a simple eight-character password consisting only of numbers, it takes just 37 seconds to crack it using brute force, a method that uses trial and error by trying as many combinations as possible. If the number of characters doubles, it will take a hacker 119 years to figure it out.
Experts advocate longer passwords even if they are simpler. An eight-character password that mixes numbers with upper and lowercase letters and symbols takes seven years to crack, which is still less time than it takes to crack a 16-character password made up of only numbers.
The time it takes to crack a password was longer in this year's table as the firm analyzed a stronger password encryption method. However, they warned that the increase in time to crack a password "is unlikely to last as computing power increases in the coming years". Passwords tested by Hive Systems are also randomly generated.
If a password has been stolen before, uses dictionary words, or is reused between websites, the time needed to crack it drops dramatically. If you want to test the strength of your passwords, the How Secure Is My Password? website can, as the name suggests, tell you if you need to change it.
While longer passwords offer better protection, managing them can be a challenge, which is why password managers that securely store and encrypt login credentials are a popular solution. Additionally, a password manager favors the use of unique, complex logins that limit security exposure in the event of a data breach.
Even if your password is weak, websites usually have security features to prevent brute force hacking such as limiting the number of attempts. Portals that lead to sensitive information also often use an additional layer of security, such as two-factor authentication to prevent fraud.
While frequent password changes were previously advised, experts now emphasize creating strong, unique passwords and sticking to them unless compromised. This approach is considered more effective than frequent changes, which can lead to weaker passwords and reuse of similar ones.