Cybersecurity Academy
Week 2: What Makes a Password “Strong”?
ERY IT Security Team May 7, 2026
Module 2: Password Components and Security
Cybersecurity is not just about the dangers inside the screen. To break into strong systems, malicious actors most often exploit the simple mistakes of human nature.
⏱️ Interactive Lab: Detailed Password Analysis
In the lab recording below, see how criteria such as uppercase letters, digits, symbols and length change the time it takes to crack a password.
🔑 Password Cracking: Why “Length” Matters More Than Complexity
Modern computers try billions of passwords per second in “brute force” attacks. An 8-character password containing an exclamation mark and an uppercase letter used to be secure; today, however, cracking times are far shorter.
| Password Example | Character Count | Composition | Time to Crack |
|---|---|---|---|
| Firma2025 | 9 characters | Uppercase/lowercase letters + digits | Instantly |
| $Ankara*2025! | 13 characters | Letters + digits + 3 symbols | A few days |
| TodayIsSunnyAndIAmDrinkingCoffee! | 33 characters | Letters + symbol only | Millions of years |
12+ charactersThe starting threshold for security
4 different typesUppercase, lowercase, digit, symbol
0 dictionary wordsUnpredictability
Important note: When setting your corporate password, take care to use at least 12 characters and to make sure your password does not contain your name or your company's name.
Author:
Ercan YÜCETEPE
Technical Operations Advisor