Vast Majority (90%) of Passwords Can Be Cracked in Seconds: A Concerning Update on Data Security

The spotlight is undeniably focused on data security these days. With data breaches being a constant threat to both small and large scale organizations alike, clients are voicing their concerns about vulnerability like never before. Two-factor authentication has become a staple across various top-rated websites, but the traditional password system doesn’t seem to be going anywhere anytime soon.

According to a report by Info Security Magazine, a shocking 90% of passwords can be cracked within seconds. As unsettling as it sounds, technological advances call for a re-evaluation of what we previously deemed as secure, researchers suggest.

Previously acclaimed as robust, passwords including at least eight characters, one number, mixed-case letters, and non-alphanumeric symbols no longer suffice. “The emergence of advanced hardware and software easily outsmarts such passwords,” warns Duncan Stewart, the director of research behind the report. A machine with readily available virtualization software and high-powered graphics processing units can reveal any eight-character password in approximately five hours, he further adds.

[image-caption: “Decoding the password: Technological advancements prove a challenge to traditional password systems.”]

Human behavior, unfortunately, is often a stumbling block when venturing towards safer options. Consider the practicality of remembering multiple unique 24-character passwords – most users would find this task rather daunting. This leads to an over-reliance on single-password use, which undermines password security even further. A seemingly insignificant account, like a grocery store loyalty card, if cracked, could potentially provide unwanted access to more critical platforms such as online banking, simply due to password reuse. In the cyber world, a single password can open up the gates to a digital kingdom, given the commonality of consumer behavior.

[image-caption: “Password reuse: A detrimental trend amongst consumers.”]

Regardless, Stewart adds a note of optimism, “Moving to longer passwords or truly random passwords might seem impractical, as people are not likely to adopt them. However, multifactor authentication using tokens, cellphones, credit cards, and more seem to be promising solutions.”

Imagine routinely getting additional passwords sent via SMS, or biometric requirements such as fingerprint scans becoming a norm. Even ‘tap and go’ credit cards could soon be a regular facet of our future technology use, suggests Stewart.

While the conclusion is not panic-inducing, it’s a timely reminder that we can’t afford to become complacent when it comes to data security. As technology evolves, so too should our methods of protection. The future of data security will be determined by our ability to stay ahead of the threats and adapt our strategies accordingly.

This article was updated in 2025 to reflect modern realities.