The beginnings of authentication
The first computer password was implemented at MIT in 1961 by Professor Fernando Corbató for the CTSS (Compatible Time-Sharing System). Each user had a private file protected by a password. Interestingly, in 1962 the first password theft occurred when a researcher managed to print the password file to get more computer usage time. This demonstrated from the beginning that passwords needed additional protection.
Evolution and modern attacks
Passwords have evolved from simple words to complex hash algorithms (bcrypt, Argon2). Attacks have also advanced: from basic brute force to dictionary attacks, rainbow tables, and sophisticated AI-based attacks. A modern graphics card can try billions of passwords per second. This has led to the creation of standards like multi-factor authentication and password managers.
Fun facts and curiosities
• The most common passwords of 2023 are "123456", "password" and "qwerty" (can be cracked in less than 1 second)
• An 8-character password with only lowercase letters has 208 billion combinations, but can be cracked in minutes with modern hardware
• The longest password accepted by many systems is 128 characters
• 65% of people reuse passwords across different services
• "Correcthorsebatterystaple" (a famous xkcd) has 44 bits of entropy and would take 550 years to brute force crack