remvze / pswd

🔑 Simple secure password generator.
https://pswd.mvze.net
MIT License
51 stars 1 forks source link

estimated cracking time wrong #3

Open coro1404 opened 2 weeks ago

coro1404 commented 2 weeks ago

Hi

Webgui suggests very short cracking times for e.g. 12 character mixed (number, symbols etc.) passwords. Does not match this table

image

remvze commented 2 days ago

Hey there. I tried going for the worst-case scenario, which is offline brute force of fast hashes (e.g., SHA-256), which is much faster than what it takes to brute-force a more secure KDF such as PBKDF2 with high iterations. I can certainly change it, but I much prefer to select my password based on the worst-case scenario.