- Twelve GPU RTX 5090 can break short (but complex) passwords in days
- The complexity of the password and the length considerably increase the time necessary for the brute force
- Cracking of the real world could be faster than estimates of the scenario of Hive Systems
The Hive Systems cybersecurity company has published its latest password cracking diagram for 2025, built around a simulated attack using 12 NVIDIA RTX 5090 GPU.
The point to take? If your password is short, simple and predictable, it will not last long. But if you already use long unique passwords with a mixture of letters, numbers and symbols, there are few reasons to panic.
The RTX 5090 is Nvidia’s most powerful game GPU to date, but in Hive Systems tests, it is doubled with a password cracked machine.
The more it is much better
A chopping representing a six -character password made from numbers and tiny letters could only take 14 days to crack using a brute force approach. Add the complexity and length, however, and the chronology increases quickly. For example, an 18 -character password using lowercase letters, figures, capital letters and symbols would take around 463 years to break.
Hive’s search models the brute force attack scenario of the worst case, where the hacker has already stolen a chopped password database and uses strong equipment to guess correct chopping. It does not reflect more common attacks such as phishing or password exploits, but it emphasizes why short passwords remain a risk.
It is worth emphasizing it, as PC player Note: “Passwords can be cracked much faster than the figures here do not indicate, because the software could fall on the right earlier in the process.”
BCRYPT, the hash algorithm that the hive used in its test, is commonly used to blur the passwords before storing them. Although it cannot be reversed directly, it can be guessed by generating atmosphere from millions or billions of possible combinations. This is where the GPU excellent. Parallel treatment makes them ideal for guessing the password on a large scale.
Hive also examined what would happen if the pirates had access to much more power, such as the 20,000 NVIDIA A100 GPUs used to form Chatgpt-4. Even then, a password only in 18 characters would still take hundreds of years to break.
So what is the lesson here? Password length and variety of characters – in particular symbols – always matters. And with the GPUs of consumers who do not become faster, it is the right time to use a password manager and stop counting on something less than 12 characters.