TFT

Hash Brute-Force Time Estimator – How Long to Crack a Password Hash?

Understand the real-world risk of hash cracking with our Brute-Force Time Estimator. Enter the hash algorithm, password length, and character set to estimate how long it would take to crack the hash by brute force.

GPU cluster: ~100 billion/sec for MD5

Security Analysis

Enter password details and click Calculate to see analysis

Password Security Best Practices

  • Length: At least 12 characters, 16+ recommended
  • Complexity: Mix of uppercase, lowercase, numbers, symbols
  • Hashing: Use bcrypt, Argon2, or scrypt for passwords
  • Uniqueness: Never reuse passwords across sites

Note: This calculator assumes pure brute-force attack. Real-world attacks often use dictionaries and rainbow tables, which can crack weak passwords much faster. Always use strong, unique passwords.