Use an 8-char Windows NTLM password? Don't. Every single one can be cracked in under 2.5hrs

CorrectHorseBatteryStaple once again more secure and memorable than ff3sd21n

HashCat, an open source password recovery tool, can now crack an eight-character Windows NTLM password hash in less time than it will take to watch Avengers: Endgame."