Cybersecurity Academy
Week 2: What Makes a Password “Strong”?
ERY IT Security Team May 7, 2026
Module 2: Password Components and Security
Cybersecurity is not just about the dangers inside the screen. To break into strong systems, malicious actors most often exploit the simple mistakes of human nature.
⏱️ Interactive Lab: Detailed Password Analysis
In the lab recording below, see how criteria such as uppercase letters, digits, symbols and length change the time it takes to crack a password.
🔑 Password Cracking: Why “Length” Matters More Than Complexity
Modern computers try billions of passwords per second in “brute force” attacks. An 8-character password containing an exclamation mark and an uppercase letter used to be secure; today, however, cracking times are far shorter.
| Password Example | Character Count | Composition | Time to Crack |
|---|---|---|---|
| Firma2025 | 9 characters | Uppercase/lowercase letters + digits | Instantly |
| $Ankara*2025! | 13 characters | Letters + digits + 3 symbols | A few days |
| TodayIsSunnyAndIAmDrinkingCoffee! | 33 characters | Letters + symbol only | Millions of years |
12+ charactersThe starting threshold for security
4 different typesUppercase, lowercase, digit, symbol
0 dictionary wordsUnpredictability
Important note: When setting your corporate password on .com, take care to use at least 12 characters and to make sure your password does not contain your name or your company's name.
Author:
Ercan YÜCETEPE
Technical Operations Advisor