Wonderful, an AI can crack the most common passwords almost instantly

Fake hacker keyboard.
(Image credit: Getty Images - Peter Dazeley)

Just how strong are your passwords? A recent study finds that an AI password cracker can figure out the most common 4-7 character passwords in a matter of seconds. The scary part is that it includes passwords with upper and lower case letters and numbers. Not even hackers are safe from having their jobs taken by an AI!

Cyber security firm Home Security Heroes (via Tom's Hardware) fed PassGAN, an AI password cracking tool that leverages a generative adversarial network (GAN), over 15 million common passwords to train the model that could brute force some of the most common passwords in seconds.  The passwords were taken from the RockYou dataset (which included passwords for Myspace and Facebook), which was hacked back in 2009. So it's training the AI with real passwords people have used, therefore "improving the quality of predicted passwords."

Home Security Heroes found that PassGAN cracks 51% of common passwords (4-7 characters) in just under a minute, with more challenging passwords (up to 11 characters) in less than a month. A fun little tool on the site lets you type in a password, telling you how long the AI will take to crack it. Though, to be on the safe side, I wouldn't type your current password in there. 

So, I typed in the 'AbC12345' only to find out that an AI would take roughly 48 minutes to figure it out. The more extended and more random the character set, the more difficult it is for the AI to predict it. The most common password of 2023 was, according to Cybernews, you guessed it, 123456, which would take PassGAN only six minutes to crack. 

The AI struggles with passwords more than 12 or more characters long with a mixture of numbers and upper and lower case letters, and a password with 18 characters could take up to 7 billion years to crack. However, the most commonly used passwords are usually eight or fewer characters. 

Window shopping

Windows 11 Square logo

(Image credit: Microsoft)

Windows 11 review: What we think of the new OS
How to install Windows 11: Safe and secure install
What you need to know before upgrading: Things to note before downloading the latest OS
Windows 11 TPM requirements: Microsoft's strict security policy

The researchers recommend using a password with at least 15 characters with at least two upper and lower case letters, as well as tossing in a couple of symbols. Another tip is to avoid using the same password for multiple accounts and changing them every three to six months.

I actually went back and typed in 123456.!!! And it went from six minutes to 356 years, so something is to be said about tossing a couple of symbols into your new password.

The staff here at PC Gamer use password managers like LastPass, which keeps all your passwords in one safe place. However, if you want the maximum level of security, we recommend giving our password primer a look and protecting yourself.

Jorge Jimenez
Hardware writer, Human Pop-Tart

Jorge is a hardware writer from the enchanted lands of New Jersey. When he's not filling the office with the smell of Pop-Tarts, he's reviewing all sorts of gaming hardware, from laptops with the latest mobile GPUs to gaming chairs with built-in back massagers. He's been covering games and tech for over ten years and has written for Dualshockers, WCCFtech, Tom's Guide, and a bunch of other places on the world wide web. 

Read more
Kinzie, in an FBI jacket, uses a computer with the logo of the Third Street Saints on it
Have I Been Pwned adds over 284 million compromised passwords from latest breach
Nvidia RTX 4090 Founders Edition graphics card
A single RTX 4090 managed to brute force crack an Akira ransomware attack in just 7 days
'No real human would go four links deep into a maze of AI-generated nonsense': Cloudflare's AI Labyrinth uses decoy pages to trap web-crawling bots and feed them slop 'as a defensive weapon'
Asus ROG Zephyrus G16 with an AMD Ryzen AI 9 HX 370 chip inside it.
Just in case you've forgotten all about them, AMD posts a less-than-convincing argument as to why AI PCs are better than any other type of PC
Closeup of the new Copilot key coming to Windows 11 PC keyboards
Microsoft co-authored paper suggests the regular use of gen-AI can leave users with a 'diminished skill for independent problem-solving' and at least one AI model seems to agree
Mister Fantastic giving a thumbs up
A Marvel Rivals player has uncovered 'one of the most dangerous vulnerabilities a game can have' that'll let cheaters take over your PC and find your passwords
Latest in AI
Otter AI Meeting Agent
As if your work meetings weren't already fun enough, now Otter has a new all-hearing AI agent that remembers everything anyone has said and can join in the discussion
Image for
'No real human would go four links deep into a maze of AI-generated nonsense': Cloudflare's AI Labyrinth uses decoy pages to trap web-crawling bots and feed them slop 'as a defensive weapon'
CHINA - 2025/02/11: In this photo illustration, a Roblox logo is seen displayed on the screen of a smartphone. (Photo Illustration by Sheldon Cooper/SOPA Images/LightRocket via Getty Images)
'Humans still surpass machines': Roblox has been using a machine learning voice chat moderation system for a year, but in some cases you just can't beat real people
OpenAI logo displayed on a phone screen and ChatGPT website displayed on a laptop screen are seen in this illustration photo taken in Krakow, Poland on December 5, 2022.
ChatGPT faces legal complaint after a user inputted their own name and found it accused them of made-up crimes
Public Eye trailer still - dead-eyed police officer sitting for an interview
I'm creeped out by this trailer for a generative AI game about people using an AI-powered app to solve violent crimes in the year 2028 that somehow isn't a cautionary tale
Closeup of the new Copilot key coming to Windows 11 PC keyboards
Microsoft co-authored paper suggests the regular use of gen-AI can leave users with a 'diminished skill for independent problem-solving' and at least one AI model seems to agree
Latest in News
Image of Ronaldo from Fatal Fury: City of the Wolves trailer
It doesn't really make sense that soccer star Ronaldo is now a Fatal Fury character, but if you follow the money you can see how it happened
Junah beginning a battle in Metaphor: ReFantazio.
Today's RPG fans are 'very sensitive to feeling like they wasted time' when they die, says Metaphor: ReFantazio battle planner—but Atlus still made combat hard anyway
Image of Cersei Lanniser from Game of Thrones: Kingsroad Steam early access trailer
A new Game of Thrones RPG is coming to Steam today with a cast of 'familiar faces,' which is good because it's really the only way to tell it's a GoT game at all
The new Prime Asset featured in the upcoming update for the Outlast Trials.
The Outlast Trials puts its already paranoid players under surveillance for a time-limited story event
A Viera looking confused in Final Fantasy 14.
Old armor continues to fall victim to Final Fantasy 14's bizarre two-channel dye system, unless you're super into changing the colour of teeny-tiny eyelets: 'Why even bother at this point?'
Starfield: Shattered Space
By the time Bethesda was on Starfield, you'd 'basically get in trouble' for breaking schedule, says former dev: 'A lot of the great stuff within Skyrim came from having the freedom to do what you want'