[4death4]

So 99 of them could crack a password in 1 year? That is easily obtainable and not secure at all.

[daveguy]

If your password is only 8 characters. I go with a minimum of 14. That means 99 years turns into heat death of the universe... Or a pipe wrench.

[SebFender]

It doesn't work that way - and if it did - it's absolutely acceptable in most, if not all systems. A year to "break something" is absolutely considered secure in risk management of larger systems.

[4death4]

How does it not work that way? Password cracking is infinitely parallelizable.

[SebFender]

Technically yes - but when it comes to attacks not really. If someone wants it, you have much easier and faster techniques.