rafay@range:~/cracklab$

CRACKLAB

by Rafay Hadi Hussain — type a password, see how many guesses it takes to break it and roughly how long that takes at different attacker speeds. Everything runs locally; nothing you type ever leaves this page.

test a password

—

⚠ this is one of the most common passwords in every breach dump — it gets tried in the first few seconds of any attack, no matter how "long" it looks.

characters

char pool size

bits of entropy

possible combos

estimated time to crack, by attacker speed

attack scenario	avg. time

brute-force simulation (sped up for visualization)

••••••••

This animation always finishes in a few seconds so you can watch it — real attacks don't slow down for weak passwords, they simply finish fast. The real estimate is the table above. A slow hash (bcrypt/argon2) on the server is what actually buys you time; a fast hash (unsalted MD5/SHA-1) gives almost none.