Quote from: ETFbitcoin on Today at 12:11:47 PM

Quote from: Captain-Cryptory on Today at 09:24:28 AM

36.99 minutes in the case of offline attack scenario and 2.22 sec if the massive cracking array of relevant devices is used, according to https://www.grc.com/haystack.htm To be on the safe side the entropy of password should be at least 256 bit and password itself should consist of two parts, i.e dynamic and static, the latter delivered via HW security key (https://bitcointalk.org/index.php?topic=5223442.msg53778608#msg53778608).

Those are rough estimation and actual time to brute-force the password depends on algorithm used for encryption (encryption require more computational power compared with hashing) and hardware owned by the hacker.

Sure, rough. In confidence, using the rainbow tables (which are flooding the Web) it can be achieved even faster and it doesn't require too modern equipment. Those estimates simply show the password with eight characters all together is too weak.