Password cracking is the process of recovering usable credentials by guessing passwords or computing them from stored hashes. Attackers may use dictionary attacks, brute force, rule-based mutations, or specialized hardware to test large numbers of candidate passwords quickly. When the target is a hash, the attacker works offline against the captured data, which avoids account lockouts and makes rapid guessing easier.
In cyber security, password cracking matters because weak, reused, or poorly protected credentials often become the simplest path to initial access or privilege escalation. Defenders use strong password policies, unique passwords, multifactor authentication, rate limiting, and modern hashing algorithms with salts and slow key-stretching to reduce cracking speed. Security teams also monitor for leaked credentials and unusual authentication attempts, since cracked passwords are often reused across systems and can turn a single compromise into broader network access.