How Hackers Crack Passwords — and the 4 Words That Stop Them

100 billion guesses per second. That's what your password is up against — and most passwords don't even need to be cracked, because they're already leaked. In under 6 minutes: the 4 weapons attackers use (brute force, dictionary mutations, credential stuffing, plain theft), the math that makes length unbeatable, and the 5-move action plan that ends password worry for good. Show it to your team — it doubles as security awareness training. ⏱ CHAPTERS 0:00 100 billion guesses per second 0:35 The four weapons 0:44 Weapon 1 — Brute force (how fast passwords fall) 1:08 Weapon 2 — Dictionary attacks (P@ssw0rd1! decoded) 1:43 Weapon 3 — Credential stuffing (the reuse trap) 2:18 Weapon 4 — Plain theft 2:33 The math: length beats complexity 3:03 The passphrase — 4 words to uncrackable 3:20 The 5-move action plan 4:14 Check what's already leaked 4:28 Passkeys: the future 4:53 Your 30 minutes tonight 🛡 FREE TOOLS & HELP • Check if your accounts are in known breaches: https://haveibeenpwned.com/ • Strong passwords, explained by CISA: https://www.cisa.gov/secure-our-world... • Turn on MFA — why + how: https://www.cisa.gov/secure-our-world... • NIST's official password guidelines (yes, they say length is greater than forced symbols): https://pages.nist.gov/800-63-4/sp800... 📚 CREDITS & FURTHER READING • "correct horse battery staple" — the legendary XKCD passphrase comic: https://xkcd.com/936/ • Breach patterns: Verizon DBIR: https://www.verizon.com/business/reso... 🔑 THE 5 MOVES (recap) 1. Password manager — unique random password per site 2. One master passphrase — 4+ random words, the last password you'll memorize 3. MFA everywhere — email first (it resets everything else) 4. Breach check — haveibeenpwned.com, fix the leaked ones first 5. Passkeys — when offered, take them Missed the ransomware video this one follows? Watch it next. ⚠️ Education only: crack-time figures are order-of-magnitude estimates for offline attacks on fast hashes. No attack instructions are shown — just how to defend. Visuals created with AI video generation. #passwords #cybersecurity #infosec #passwordsecurity #securityawareness