← Back to Labs

Password hashing cracking model

Estimate how long a password survives offline GPU guessing with rough real-world hashcat-style rates.

estimated crack time (log scale) for a 10-character a-z A-Z 0-9 passwordMD5SHA-256PBKDF2bcryptscryptArgon2id1 s1 day1 year
safe for decadesArgon2id (64 MiB)

8.4e+17 candidate passwords, 180 guesses/s total (1 GPU). Average time to hit the password: 73.9 M years. Full keyspace sweep: 147.9 M years.

Pick an algorithm, a password shape, and a GPU budget. Watch the expected cracking time move from seconds to effectively impractical.

Shortcuts: 1-6 pick algorithm · X reset
Pick algorithm and drag sliders.
Read the full article →Take the quiz →