AI Can Crack Most Common Passwords in Less Than a Minute — Here's How to Set a Safe One If your passwords have certain characteristics, they're infinitely more vulnerable.

By Madeline Garfinkle Edited by Jessica Thomas

Opinions expressed by Entrepreneur contributors are their own.

In our ever-expanding digital world, passwords are an inevitability: email, apps, subscriptions and loyalty programs — nearly everything is designed to be secure behind a self-set code that permits entry. According to technology site TechCo, the average person has about 100 passwords, so it's no surprise that when signing up for a new account, individuals can sometimes get lazy with word choice. However, there's a new risk to password vulnerabilities: artificial intelligence.

A new report by Home Security Heroes found that 51% of common passwords can be cracked in less than a minute using an AI password cracker, and 81% can be cracked in less than a month.

Home Security Heroes used the AI password cracker PassGAN to run through a list of 15,680,000 passwords. The odds of AI decoding one's password increase when a password has a minimal amount of characters and lacks variety (only using lowercase, only using numbers, etc.). Still, it found that it took PassGAN less than six minutes to crack a password of seven characters, even when it contained symbols.

Related: Elon Musk Says We Should Stop Rapid AI Development Right Now — Here's Why

How to set a password that's safe from AI:

According to Home Security Heroes' findings, it takes AI significantly longer to crack a password with more characters and variety. In essence: The longer the password and the more letters, numbers and symbols you use, the safer it is from AI.

A password with 14 characters composed of upper and lower case letters, symbols and numbers takes AI an average of 187 million years to crack, as opposed to a password of seven characters composed of just upper and lower case letters — which takes AI an average of 22 seconds to crack.

Although it might be more time-consuming, if you want to ensure password security as AI technology advances, it's best to keep your passwords at least 10 characters long, with some combination of upper and lower case letters, symbols and numbers.

Related: How AI Is Shaping the Cybersecurity Landscape — Exploring the Advantages and Limitations

Madeline Garfinkle

News Writer

Madeline Garfinkle is a News Writer at Entrepreneur.com. She is a graduate from Syracuse University, and received an MFA from Columbia University. 

Want to be an Entrepreneur Leadership Network contributor? Apply now to join.

Side Hustle

This Couple Started a Side Hustle to Improve a 'Terribly Made' Bathroom Essential. Now the Business Earns More Than $3 Million a Year.

Michael Fine and Lisa Schulner-Fine launched lifestyle brand Quiet Town in 2016 and have been growing it ever since.

Business News

What's Open on Easter Sunday? Costco and Target Will Close, But One Major Retailer Will Be Open. Here's What To Know.

The stock market was closed for Good Friday on April 18. Here's what's closed for Easter Sunday, April 20.

Business Ideas

70 Small Business Ideas to Start in 2025

We put together a list of the best, most profitable small business ideas for entrepreneurs to pursue in 2025.

Marketing

The One Mistake Is Putting Your Brand Reputation at Risk — and Most Startups Still Make It

Many businesses pour resources into branding and marketing but overlook PR — yet it's PR that builds the trust, credibility, and reputation that turn attention into lasting revenue in a crowded market.

Leadership

Here's What It Takes to Evolve From Hands-On Founder to Strategic CEO

Making the leap from founder to CEO requires more than just growth — it demands a shift in mindset.

Marketing

If You're Using ChatGPT This Way as a Marketer, You're Missing Out on Its Full Potential. Here's How to Maximize Your Results.

The real value of AI isn't in what you ask — it's in how you shape the conversation. Mastering prompt interactions means better content, sharper thinking and fewer generic outputs.