Password Hacking Time

Data from Gartner, Forrester, Duo Security, Imperva, LastBit Software
via http://www.businessweek.com/magazine/content/11_06/b4214036460585.htm

Most common passwords:
123456, password, 12345678, qwerty, abc123


In password brute-forcing time (in general)

number of characters	6 chars	7 chars	8 chars	9 chars
lowercase only	10 minutes	4 hours	4 days	4 months
+ uppercase	10 hours	23 days	3 years	178 years
+ numbers + symbols	18 days	4 years	463 years	44,530 years

Chance of users using a common password or simple combination word:
50%