AI is making short passwords weak

AI and modern computing power are pushing the need for longer, more complex passwords or passphrases—and here’s why:

---

Why short passwords are now weak

• AI-powered password cracking tools (often using machine learning, massive GPU clusters, or pre-trained models) can guess or brute-force:
  • 6-character passwords in seconds—especially if they’re just lowercase letters or common words.
  • Even 8-character passwords are vulnerable if not truly random or complex.
• These tools use:
  • Dictionary attacks with huge lists of known passwords (like from past breaches).
  • Pattern recognition to guess human-created passwords (e.g., Summer2024!).
  • Markov models and neural networks to intelligently guess likely character combinations.

---

Why passphrases are stronger

• A passphrase like correct horse battery staple is:
  • Much longer, adding entropy (randomness).
  • Easier to remember, yet hard to guess.
  • Harder for AI or brute-force tools to crack, especially if it’s unique and not from a quote or common phrase.

---

Recommendations

1. Use at least 12–16 characters: Longer = exponentially harder to crack.
2. Avoid dictionary words alone: Especially in short passwords.
3. Use a password manager: Let it generate and store strong random passwords.
4. Enable two-factor authentication (2FA): Even if a password is stolen, 2FA blocks access.

---

Example comparison

Password	AI Crack Time (approx.)
abc123	Instant
P@ssw0rd	Few seconds
G7#kLz8*	Minutes to hours
CrabTruck7CoffeeMug	Years to centuries

---

Bottom line

The best defense today is using long passphrases or truly random strings, ideally with 2FA. Don’t reuse passwords, and avoid common patterns—even ones that feel clever.

All areas of WoodCentral that have a registration system support passphrases and may require them. We also offer a simple tool to create random passphrases if you can’t decided upon one.