Take the tour ×  I've tested the tool from Microsoft available
here which tests password strength and rates them. For a
password such as "i am going to have lunch tonight", the tool
rates it's strength as "BEST" and for a password such as
"th1$.v4l" it rates it as "Medium".  I'm wondering how important
password length really is. In this case the first password is
better according the their tool but is it really better? It's
based on dictionary words and has no combination of numbers and
other characters besides spaces, and seems very easy to crack
(not considering brute force).  Is that tool giving precedence
to length instead of actual strength ?  share|improve this
question I wonder if anyone has built a Markov model based brute
forcer for pass phrases. –  StephenPaulger May 25 '11 at 11:07
@StephenPaulger, yes, they have. –  D.W. Jun 20 '11 at 4:00
There are already available rainbow tables for NTLM and MD5 to
crack any password up to 8 character long using all characters
on the keyboard. The set for "lowe