--- title: I can probably hack your password in MINUTES! | daily.dev description: The average password is easily hacked in minutes by an experienced software developer. This is because of a fundamental flaw in how we were taught to create... canonical: https://daily.dev/posts/i-can-probably-hack-your-password-in-minutes---di1tcc-b twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: I can probably hack your password in MINUTES! | daily.dev og:description: The average password is easily hacked in minutes by an experienced software developer. This is because of a fundamental flaw in how we were taught to create... og:url: https://daily.dev/posts/i-can-probably-hack-your-password-in-minutes---di1tcc-b og:image: https://api.daily.dev/og/posts/-dI1TCC_B.png og:image:alt: I can probably hack your password in MINUTES! og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # I can probably hack your password in MINUTES! **[DZone](https://daily.dev/sources/dz)** · 4 min read · 114 upvotes · 16 comments ## Summary The average password is easily hacked in minutes by an experienced software developer. This is because of a fundamental flaw in how we were taught to create our passwords. There are simply not enough possible combinations in short passwords such as the above to be "random enough" to prevent a computer from guessing it. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Community discussion Top comments from developers on daily.dev. **@way2extreme** · 3 upvotes > Okay. You get 3 tries to hack my password and then the account is locked and you are out of business. Ready? Go! **@ghost** · 2 upvotes > how 3m years marked as yellow **@lenincarrion** · 1 upvotes > Helpful information, now I confidently can say that my next password will be more secure but not too difficult to remember. **@fitzy86z** · 1 upvotes > Interesting, but the stated problem also assumes the username is known, infinite attempts, and single-factor authentication. Most sites have a combination of at least the following: limited number of password attempts, lockout period for too many bad logins, account alert e-mails for unfamiliar or bad login attempts, a required secondary form of identification, etc. While you could generate a list of passwords that contains the real password instantly, actual password identification would take much more time. **@pmioduszewski** · 0 upvotes > O_O Good Lord ## Similar posts on daily.dev - [Don’t just attend KubeCon \+ CloudNativeCon, Merge Forward your experience\!](https://daily.dev/posts/don-t-just-attend-kubecon-cloudnativecon-merge-forward-your-experience--l0rpp73x8) · CNCF · 1 upvotes · 0 comments - [Announcing H2 2026 KCDs](https://daily.dev/posts/announcing-h2-2026-kcds-m96goajm1) · CNCF · 1 upvotes · 0 comments - [Two months of Open Community Groups](https://daily.dev/posts/two-months-of-open-community-groups-asf52zhbs) · CNCF · 0 upvotes · 0 comments - [CNCF Unveils Schedule for KubeCon \+ CloudNativeCon Europe 2026](https://daily.dev/posts/cncf-unveils-schedule-for-kubecon-cloudnativecon-europe-2026-ikhcoa5cb) · CNCF · 2 upvotes · 0 comments - [CNCF Debuts KubeCon \+ CloudNativeCon Japan 2026 Schedule](https://daily.dev/posts/cncf-debuts-kubecon-cloudnativecon-japan-2026-schedule-xp5pyudub) · CNCF · 1 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security) [View this post on daily.dev](https://daily.dev/posts/i-can-probably-hack-your-password-in-minutes---di1tcc-b) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"I can probably hack your password in MINUTES!","url":"https://daily.dev/posts/i-can-probably-hack-your-password-in-minutes---di1tcc-b","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/i-can-probably-hack-your-password-in-minutes---di1tcc-b"},"datePublished":"2022-03-06T08:38:55.114Z","dateModified":"2022-03-06T08:38:55.114Z","description":"The average password is easily hacked in minutes by an experienced software developer. This is because of a fundamental flaw in how we were taught to create...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/2338548ef85c5be51cff05e5518bda65","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/2338548ef85c5be51cff05e5518bda65","isAccessibleForFree":true,"articleSection":"DZone","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"DZone","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/dz","url":"https://daily.dev/sources/dz"},"commentCount":16,"discussionUrl":"https://daily.dev/posts/i-can-probably-hack-your-password-in-minutes---di1tcc-b","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":114},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":16}],"keywords":"security","timeRequired":"PT4M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"DZone","item":"https://daily.dev/sources/dz"},{"@type":"ListItem","position":3,"name":"I can probably hack your password in MINUTES!"}]} {"@context":"https://schema.org","@type":"WebPage","@id":"https://daily.dev/posts/i-can-probably-hack-your-password-in-minutes---di1tcc-b","comment":[{"@type":"Comment","text":"Okay. You get 3 tries to hack my password and then the account is locked and you are out of business. Ready? Go!","datePublished":"2022-03-11T14:25:10.723Z","url":"https://daily.dev/posts/-dI1TCC_B#c-EOgYqyaqp","author":{"@type":"Person","name":"Rod Hartzell","url":"https://daily.dev/way2extreme","image":"https://avatars3.githubusercontent.com/u/862497?v=4"},"interactionStatistic":{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":3}},{"@type":"Comment","text":"how 3m years marked as yellow","datePublished":"2022-03-10T19:51:42.400Z","url":"https://daily.dev/posts/-dI1TCC_B#c-NNUwCWbB_","author":{"@type":"Person","name":"Deleted user","url":"https://daily.dev/ghost","image":"https://media.daily.dev/image/upload/s--hNIUzLiO--/f_auto/v1705327420/public/ghost_vlftth"},"interactionStatistic":{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":2}},{"@type":"Comment","text":"Helpful information, now I confidently can say that my next password will be more secure but not too difficult to remember.","datePublished":"2022-03-07T19:10:51.923Z","url":"https://daily.dev/posts/-dI1TCC_B#c-49ls0l7nn","author":{"@type":"Person","name":"Lenin Carrion","url":"https://daily.dev/lenincarrion","image":"https://lh3.googleusercontent.com/a-/AOh14GikR-3HedB_2S2rLp4JCFP0TDn8dkaRqOdgtLIIcA=s100"},"interactionStatistic":{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":1}},{"@type":"Comment","text":"Interesting, but the stated problem also assumes the username is known, infinite attempts, and single-factor authentication. Most sites have a combination of at least the following: limited number of password attempts, lockout period for too many bad logins, account alert e-mails for unfamiliar or bad login attempts, a required secondary form of identification, etc. While you could generate a list of passwords that contains the real password instantly, actual password identification would take much more time.","datePublished":"2022-05-19T19:19:41.011Z","url":"https://daily.dev/posts/-dI1TCC_B#c-wXmBgjbG7","author":{"@type":"Person","name":"Heather D","url":"https://daily.dev/fitzy86z","image":"https://lh3.googleusercontent.com/a/AATXAJwCk4C-SluDf1iO8XVGiPADhc6_sZ-LiUXb-4E_=s100"},"interactionStatistic":{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":1}},{"@type":"Comment","text":"O_O Good Lord","datePublished":"2022-03-12T20:34:07.438Z","url":"https://daily.dev/posts/-dI1TCC_B#c-hr9xzN7QC","author":{"@type":"Person","name":"Pawel Mioduszewski","url":"https://daily.dev/pmioduszewski","image":"https://avatars.githubusercontent.com/u/43101981?v=4"}}]} ```