---
title: "Old Password Length Standards Don’t Cut It Anymore - Blogs on IT Support and Cybersecurity for Small Business"
description: "8-character passwords can now be cracked in seconds. Discover why 16 characters is the new minimum and how to protect your data from quantum-level threats."
url: "https://colemantechnologies.com/blog/old-password-length-standards-don-t-cut-it-anymore"
date: "2026-06-07T03:01:58+00:00"
language: "en-GB"
---

## Blogs on IT Support and Cybersecurity for Small Business

Insights on cybersecurity, AI, and IT strategy to help business leaders reduce risk, improve performance, and make better technology decisions.

 [ Categories ](https://colemantechnologies.com/blog/categories "Categories")

 [ Tags ](https://colemantechnologies.com/blog/tags "Tags")

 [ Categories:  All Categories ](https://colemantechnologies.com/javascript:void(0); "Categories")

 Search...Suggested keywords

 [  x ](https://colemantechnologies.com/javascript:void(0);)

 <a class="eb-image-viewport"></a>

#  Old Password Length Standards Don’t Cut It Anymore

  [Coleman Technologies Blog](https://colemantechnologies.com/blog/categories/blog)   [Security](https://colemantechnologies.com/blog/categories/security)

  [Darren Coleman](https://colemantechnologies.com/blog/blogger/darren-coleman)

  Friday, 06 March 2026

 [ ![Old Password Length Standards Don’t Cut It Anymore](//colemantechnologies.com/images/easyblog_shared/March_2026/03-06-26/b2ap3_large_OldPassword_1922344426_400.jpg) ](//colemantechnologies.com/images/easyblog_shared/March_2026/03-06-26/OldPassword_1922344426_400.jpg "Old Password Length Standards Don’t Cut It Anymore")

The short answer for why your login needs to be more complex is that hackers leveled up.

While the ongoing development of quantum computing is a real threat—since it’s capable of testing nearly infinite keys simultaneously—you do not need a supercomputer to break a weak password today. A modern graphics card, the kind found in a standard gaming PC, can shred a basic 8-character password in under sixty seconds. If a hobbyist can do it, imagine what a professional syndicate can do.

## Why Length Trumps Complexity

The National Institute of Standards and Technology (NIST) has shifted its stance: Complexity is out; length is in. A string of random characters like P@$! is actually easier to crack than a long, simple phrase.

This comes down to pure math. Every single character you add increases the difficulty for an attacker exponentially.

- **8 Characters -** roughly 6.6 x 10^{15} (6.6 quadrillion) possibilities.
- **16 Characters -** roughly 3.4 x 10^{66} (3.4 unvigintillion) possibilities.

To put that in perspective, that is the difference between a single pebble and the mass of the entire observable universe.

## Enter the Passphrase

If you want to keep your sanity and your security, stop thinking about passwords and start thinking about passphrases. Using a string of four or five unrelated words, such as BasketballProgramOrangeKelp, is notoriously difficult for a computer to guess, but incredibly easy for a human to visualize and remember.

## The Move Toward Passwordless

Even a great passphrase has its limits. That is why the industry is moving toward a passwordless future. We are huge advocates for phishing-resistant tools, including:

- **Biometrics -** Fingerprints and facial recognition.
- **Cryptographic Passkeys -** Security keys that live on your device and cannot be stolen by a fake login page.
- **MFA -** Robust multi-factor authentication that ensures you and only you are granting access.

## Secure Your Business for the Future

You do not have to navigate this transition alone. From implementing company-wide password managers to deploying advanced biometric safeguards, we specialize in keeping your team productive and your data locked down.

If you would like to talk to one of our knowledgeable IT technicians about your organizational cybersecurity, give us a call today at PHONENUMBER.

 [  ](https://colemantechnologies.com/javascript:void(0);) [  ](https://colemantechnologies.com/javascript:void(0);) [  ](https://colemantechnologies.com/javascript:void(0);)

Tags:

  [Hackers](https://colemantechnologies.com/blog/tags/hackers)   [Passwords](https://colemantechnologies.com/blog/tags/passwords)   [Security](https://colemantechnologies.com/blog/tags/security)

 [×](https://colemantechnologies.com/javascript:void(0);)

Stay Informed

When you subscribe to the blog, we will send you an e-mail when there are new updates on the site so you wouldn't miss them.

 Your Name

 E-mail Address

 [  IT Hardware Shortages Affecting Surrey Businesses ... ](https://colemantechnologies.com/blog/it-hardware-shortages-affecting-surrey-businesses-in-2026)

 [  How to Reclaim Control of Your Technology ](https://colemantechnologies.com/blog/how-to-reclaim-control-of-your-technology)

 About the author

 [ ![Darren Coleman](https://colemantechnologies.com/media/com_easyblog/images/avatars/author.png) ](https://colemantechnologies.com/blog/blogger/darren-coleman)

 [Darren Coleman](https://colemantechnologies.com/blog/blogger/darren-coleman)

  [  ](https://colemantechnologies.com/blog/blogger/darren-coleman)

Author's recent posts

  [More posts from author](https://colemantechnologies.com/blog/blogger/darren-coleman)

 [ Friday, 05 June 2026  Why Rigid Defenses Make Your Business Less Safe ](https://colemantechnologies.com/blog/why-rigid-defenses-make-your-business-less-safe)

 [ Wednesday, 03 June 2026  Simple Habits to End Digital Clutter and Boost Your Productivity ](https://colemantechnologies.com/blog/simple-habits-to-end-digital-clutter-and-boost-your-productivity)

 [ Monday, 01 June 2026  Replacing Your Business Computers Actually Protects Your Bottom Line ](https://colemantechnologies.com/blog/replacing-your-business-computers-actually-protects-your-bottom-line)

## Schema

```json
{
    "@context": "https://schema.org",
    "@type": "BreadcrumbList",
    "itemListElement": [
        {
            "@type": "ListItem",
            "position": 1,
            "name": "Home",
            "item": "https://colemantechnologies.com"
        },
        {
            "@type": "ListItem",
            "position": 2,
            "name": "Blog",
            "item": "https://colemantechnologies.com/blog"
        },
        {
            "@type": "ListItem",
            "position": 3,
            "name": "Darren Coleman",
            "item": "https://colemantechnologies.com/blog/blogger/darren-coleman"
        },
        {
            "@type": "ListItem",
            "position": 4,
            "name": "Old Password Length Standards Don’t Cut It Anymore",
            "item": "https://colemantechnologies.com/blog/old-password-length-standards-don-t-cut-it-anymore"
        }
    ]
}
```
