How effective are password hack tools?
How effective are current password hack tools, and what can be done to enable secure user authentication and defend against them?

    Requires Free Membership to View

    Login

    SearchSecurity.co.UK members gain immediate and unlimited access to breaking UK industry news, virus alerts, new hacker threats, highly focused security newsletters, and more -- all at no cost. Join me on SearchSecurity.co.UK today!

    Michael S. Mimoso, Editorial Director

    By submitting your registration information to SearchSecurity.co.uk you agree to receive email communications from TechTarget and TechTarget partners. We encourage you to read our Privacy Policy which contains important disclosures about how we collect and use your registration and other information. If you reside outside of the United States, by submitting this registration information you consent to having your personal data transferred to and processed in the United States. Your use of SearchSecurity.co.uk is governed by our Terms of Use. You may contact us at webmaster@TechTarget.com.

Password hack tools have continually improved in the past few years. In late 2008, for example, a Russian firm used parallel Nvidia Graphics cards to dramatically reduce the time needed to crack WPA Wi-Fi passwords.

The cracking process also becomes even faster if extensive rainbow tables are used. These tables contain pre-calculated password hash lookups, which can break the encryption used to protect the passwords, and therefore provide a shortcut for those trying to hack them. Thanks to these recent improvements, it is now trivial to crack a password based on a dictionary word or a dictionary word combined with a number.

The best defence against password hack tools is to create a strong password consisting of multiple words, numbers and characters of mixed case. It is also common to find the Leet alphabet (Internet slang, similar to the spellings and abbreviations used in telephone text messages) or password generators, being used to create strong passwords.

This was first published in June 2009

Back to top