{"id":119,"date":"2026-11-07T15:00:03","date_gmt":"2026-11-07T15:00:03","guid":{"rendered":"https:\/\/passwordideas.net\/blog?p=119"},"modified":"2026-11-07T15:00:03","modified_gmt":"2026-11-07T15:00:03","slug":"are-password-crack-time-estimates-accurate","status":"publish","type":"post","link":"https:\/\/passwordideas.net\/blog\/are-password-crack-time-estimates-accurate\/","title":{"rendered":"Are Password Crack Time Estimates Accurate? What \u201cYears\u201d Really Means"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Are password crack time estimates accurate? Only as illustrations. A time like \u201cyears\u201d comes from an assumed guessing speed and a simple search model, not a deadline for your account. Real risk depends on whether guesses are limited, how the password is stored, and whether it follows a predictable pattern.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">When you test a password in the <a href=\"https:\/\/passwordideas.net\/password_strength_tester\" title=\"Password Strength Checker\">Password Strength Checker<\/a>, the time it shows comes from a hypothetical model. Below I explain what the model assumes, where it stops matching real life, and what to do instead of trusting a big number.<\/p>\n\n\n\n<div class=\"wp-block-rank-math-toc-block\" id=\"rank-math-toc\"><h2>Table of Contents<\/h2><nav><ul><li class=\"\"><a href=\"#are-password-crack-time-estimates-accurate-for-real-accounts-1\">Are password crack time estimates accurate for real accounts?<\/a><\/li><li class=\"\"><a href=\"#what-does-10-billion-guesses-per-second-actually-mean-2\">What does 10 billion guesses per second actually mean?<\/a><\/li><li class=\"\"><a href=\"#are-password-crack-time-estimates-accurate-online-and-offline-3\">Are password crack time estimates accurate online and offline?<\/a><\/li><li class=\"\"><a href=\"#why-can-an-entropy-figure-and-a-strength-score-disagree-4\">Why can an entropy figure and a strength score disagree?<\/a><\/li><li class=\"\"><a href=\"#what-can-a-long-crack-time-still-miss-5\">What can a long crack time still miss?<\/a><\/li><li class=\"\"><a href=\"#what-should-you-do-instead-of-trusting-years-6\">What should you do instead of trusting years?<\/a><\/li><li class=\"\"><a href=\"#frequently-asked-questions\">Frequently asked questions<\/a><\/li><li class=\"\"><a href=\"#next-steps\">Next steps<\/a><\/li><li class=\"\"><a href=\"#sources\">Sources and further reading<\/a><\/li><\/ul><\/nav><\/div>\n\n\n<div class=\"wp-block-image pwi-auto-image\">\n<figure class=\"aligncenter size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"576\" src=\"https:\/\/passwordideas.net\/blog\/wp-content\/uploads\/2026\/11\/are-password-crack-time-estimates-accurate-image-1-108-1-b9b89bd5ce8b98bf-1024x576.jpg\" alt=\"Hourglass next to a padlock showing that crack time is only a model\" class=\"wp-image-123\" srcset=\"https:\/\/passwordideas.net\/blog\/wp-content\/uploads\/2026\/11\/are-password-crack-time-estimates-accurate-image-1-108-1-b9b89bd5ce8b98bf-1024x576.jpg 1024w, https:\/\/passwordideas.net\/blog\/wp-content\/uploads\/2026\/11\/are-password-crack-time-estimates-accurate-image-1-108-1-b9b89bd5ce8b98bf-300x169.jpg 300w, https:\/\/passwordideas.net\/blog\/wp-content\/uploads\/2026\/11\/are-password-crack-time-estimates-accurate-image-1-108-1-b9b89bd5ce8b98bf-768x432.jpg 768w, https:\/\/passwordideas.net\/blog\/wp-content\/uploads\/2026\/11\/are-password-crack-time-estimates-accurate-image-1-108-1-b9b89bd5ce8b98bf.jpg 1200w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n<\/div>\n\n\n<h2 class=\"wp-block-heading\" id=\"are-password-crack-time-estimates-accurate-for-real-accounts-1\">Are password crack time estimates accurate for real accounts?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">As arithmetic, yes. As a prediction, no. The checker divides the number of possible passwords by an assumed guessing speed and shows a duration. That tells you how large a search would be under one set of assumptions, not when someone will get into your account.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The Password Strength Checker page states that its estimate assumes 10 billion guesses per second. Treat that as an assumption, not a measured speed for your account and not a sign that anyone is guessing right now. When it shows Eons, the page itself calls the figure an illustration, not a guarantee.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Guess order matters too. A simple model treats every password as equally likely, so a randomly chosen one would be found about halfway through the search on average. Real attackers try common passwords, leaked passwords, personal clues and predictable patterns first. NIST SP 800-63B-4 (July 2025) cautions that estimating the entropy, meaning the unpredictability of a password measured in bits, of passwords people choose is challenging.<\/p>\n\n\n<div class=\"wp-block-image pwi-auto-image\">\n<figure class=\"aligncenter size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"576\" src=\"https:\/\/passwordideas.net\/blog\/wp-content\/uploads\/2026\/11\/are-password-crack-time-estimates-accurate-image-2-108-2-46aaade8b6c25ef6-1024x576.jpg\" alt=\"Speed dial and vault door illustrating an assumed guessing speed\" class=\"wp-image-125\" srcset=\"https:\/\/passwordideas.net\/blog\/wp-content\/uploads\/2026\/11\/are-password-crack-time-estimates-accurate-image-2-108-2-46aaade8b6c25ef6-1024x576.jpg 1024w, https:\/\/passwordideas.net\/blog\/wp-content\/uploads\/2026\/11\/are-password-crack-time-estimates-accurate-image-2-108-2-46aaade8b6c25ef6-300x169.jpg 300w, https:\/\/passwordideas.net\/blog\/wp-content\/uploads\/2026\/11\/are-password-crack-time-estimates-accurate-image-2-108-2-46aaade8b6c25ef6-768x432.jpg 768w, https:\/\/passwordideas.net\/blog\/wp-content\/uploads\/2026\/11\/are-password-crack-time-estimates-accurate-image-2-108-2-46aaade8b6c25ef6.jpg 1200w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n<\/div>\n\n\n<h2 class=\"wp-block-heading\" id=\"what-does-10-billion-guesses-per-second-actually-mean-2\">What does 10 billion guesses per second actually mean?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Take eight random lowercase letters. That is 26 choices per position, about 209 billion combinations. At 10 billion guesses per second, a full search takes roughly 21 seconds. Each extra random character multiplies the search by 26, which is why length does so much work.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Four words chosen at random from a 7,776-word list, such as the one in the <a href=\"https:\/\/passwordideas.net\/passphrase_generator\" title=\"Passphrase Generator\">Passphrase Generator<\/a>, give about 51.7 bits of entropy (4 times log2 of 7,776). Under the same assumed speed, a full search takes on the order of days. That is a model result, not a verdict on everyday logins, but it is why I suggest five or six words for important accounts.<\/p>\n\n\n\n<figure data-wp-context=\"{&quot;imageId&quot;:&quot;6af3fe6df1c9e&quot;}\" data-wp-interactive=\"core\/image\" data-wp-key=\"6af3fe6df1c9e\" class=\"wp-block-image alignwide size-large pwi-auto-image wp-lightbox-container\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"576\" data-wp-class--hide=\"state.isContentHidden\" data-wp-class--show=\"state.isContentVisible\" data-wp-init=\"callbacks.setButtonStyles\" data-wp-on--click=\"actions.showLightbox\" data-wp-on--load=\"callbacks.setButtonStyles\" data-wp-on--pointerdown=\"actions.preloadImage\" data-wp-on--pointerenter=\"actions.preloadImageWithDelay\" data-wp-on--pointerleave=\"actions.cancelPreload\" data-wp-on-window--resize=\"callbacks.setButtonStyles\" src=\"https:\/\/passwordideas.net\/blog\/wp-content\/uploads\/2026\/11\/are-password-crack-time-estimates-accurate-image-3-108-3-1b9860020fe16996-1024x576.jpg\" alt=\"Guarded gate versus a locked strongbox showing online and offline guessing\" class=\"wp-image-127\" srcset=\"https:\/\/passwordideas.net\/blog\/wp-content\/uploads\/2026\/11\/are-password-crack-time-estimates-accurate-image-3-108-3-1b9860020fe16996-1024x576.jpg 1024w, https:\/\/passwordideas.net\/blog\/wp-content\/uploads\/2026\/11\/are-password-crack-time-estimates-accurate-image-3-108-3-1b9860020fe16996-300x169.jpg 300w, https:\/\/passwordideas.net\/blog\/wp-content\/uploads\/2026\/11\/are-password-crack-time-estimates-accurate-image-3-108-3-1b9860020fe16996-768x432.jpg 768w, https:\/\/passwordideas.net\/blog\/wp-content\/uploads\/2026\/11\/are-password-crack-time-estimates-accurate-image-3-108-3-1b9860020fe16996.jpg 1200w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><button\n\t\t\tclass=\"lightbox-trigger\"\n\t\t\ttype=\"button\"\n\t\t\taria-haspopup=\"dialog\"\n\t\t\tdata-wp-bind--aria-label=\"state.thisImage.triggerButtonAriaLabel\"\n\t\t\tdata-wp-init=\"callbacks.initTriggerButton\"\n\t\t\tdata-wp-on--click=\"actions.showLightbox\"\n\t\t\tdata-wp-style--right=\"state.thisImage.buttonRight\"\n\t\t\tdata-wp-style--top=\"state.thisImage.buttonTop\"\n\t\t>\n\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"12\" height=\"12\" fill=\"none\" viewBox=\"0 0 12 12\">\n\t\t\t\t<path fill=\"#fff\" d=\"M2 0a2 2 0 0 0-2 2v2h1.5V2a.5.5 0 0 1 .5-.5h2V0H2Zm2 10.5H2a.5.5 0 0 1-.5-.5V8H0v2a2 2 0 0 0 2 2h2v-1.5ZM8 12v-1.5h2a.5.5 0 0 0 .5-.5V8H12v2a2 2 0 0 1-2 2H8Zm2-12a2 2 0 0 1 2 2v2h-1.5V2a.5.5 0 0 0-.5-.5H8V0h2Z\" \/>\n\t\t\t<\/svg>\n\t\t<\/button><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"are-password-crack-time-estimates-accurate-online-and-offline-3\">Are password crack time estimates accurate online and offline?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Two very different situations hide behind one number. Online guessing means trying passwords at a real login page. The service can slow or lock repeated failures, so 10 billion login attempts per second is not a reasonable reading of the display.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Offline guessing happens after a breach in which an attacker steals a database of password hashes. A hash is a one-way scrambled form of a password that a service stores instead of the password itself. With a copy of the hashes, guesses can be tested without the login page&#8217;s limits.<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><thead><tr><th>Setting<\/th><th>Who limits guesses<\/th><th>What the 10 billion figure means<\/th><\/tr><\/thead><tbody><tr><td>Online login<\/td><td>The service, through throttling and lockouts<\/td><td>Not a realistic attempt rate<\/td><\/tr><tr><td>Stolen hashes<\/td><td>Attacker hardware and the hashing method<\/td><td>A model only; real speed varies<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Offline speed depends on hardware and on the hashing scheme and its cost settings. OWASP&#8217;s Password Storage Cheat Sheet recommends salted, deliberately expensive hashing, with Argon2id as its first choice. A salt is a unique random value added to each password before hashing so identical passwords do not produce identical hashes. No single real-world cracking rate applies to everyone, and a leaked hash does not automatically reveal the password.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"section-2-detail-1\">For IT and web beginners<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">If you build a login system, store passwords with a slow, salted algorithm, never a plain fast hash. The <a href=\"https:\/\/passwordideas.net\/password_hash_generator\" title=\"Password Hash Generator\">Password Hash Generator<\/a> shows bcrypt, with a configurable cost factor, next to faster hashes in your browser, which helps with learning and testing. It does not replace your framework&#8217;s vetted password-hashing library.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"why-can-an-entropy-figure-and-a-strength-score-disagree-4\">Why can an entropy figure and a strength score disagree?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The <a href=\"https:\/\/passwordideas.net\/password_entropy_calculator\" title=\"Password Entropy Calculator\">Password Entropy Calculator<\/a> computes length times log2 of the estimated pool size. The pool is inferred from the character classes you used (lowercase, uppercase, digits) plus the number of unique symbols. This is a search-space estimate. It means what it says only if every character was picked independently and uniformly at random from that pool. It cannot tell whether a phrase you invented is unpredictable.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The Strength Checker is a separate, pattern-aware assessment. Its page says it also evaluates common patterns, dictionary words and keyboard sequences. A long password can look impressive in a pool calculation yet earn a cautious score if it follows a familiar shape. Neither number proves how an attacker would behave, and I have not independently audited either tool. Both pages say analysis runs locally in your browser, and I am relaying that claim from the pages.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">For a closer look at this mismatch, read <em><a href=\"https:\/\/passwordideas.net\/blog\/high-password-entropy-but-weak-strength-score\/\" title=\"High Password Entropy But Weak Strength Score\">High Password Entropy but Weak Strength Score: Why It Happens<\/a><\/em>.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"what-can-a-long-crack-time-still-miss-5\">What can a long crack time still miss?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">A big number says nothing about several common problems:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Reuse: credential stuffing is when attackers automatically try leaked login details on other sites.<\/li>\n\n\n\n<li>Phishing: a fake page can collect even a very strong password.<\/li>\n\n\n\n<li>Malware on your device, which can capture what you type.<\/li>\n\n\n\n<li>A password that already appears in breach data.<\/li>\n\n\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">The <a href=\"https:\/\/passwordideas.net\/password_leak_checker\" title=\"Password Leak Checker\">Password Leak Checker<\/a> hashes your password in your browser with SHA-1 and sends only the first five characters of that hash to the Have I Been Pwned range service. This is k-anonymity, a method that lets a service answer a lookup without learning the full item. Matching is done locally. SHA-1 is used here only for lookup, never for storing account passwords. A not-found result means only that the password was not in that dataset. Check passwords only on tools whose privacy approach you trust.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"what-should-you-do-instead-of-trusting-years-6\">What should you do instead of trusting years?<\/h2>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Make it long and unique. CISA&#8217;s September 2024 tip sheet recommends random, unique passwords of at least 16 characters. NIST SP 800-63B-4 (July 2025) says verifiers, meaning the systems that check your password, must enforce a minimum length of 15 characters when a password is the only factor. It allows a minimum of eight when the password is used only within multifactor authentication. Not every site follows this. Generate yours with the <a href=\"https:\/\/passwordideas.net\/\" title=\"Secure Password Generator\">Secure Password Generator<\/a> rather than inventing one.<\/li>\n\n\n\n<li>Prefer random words for passwords you must remember. Do not rely on forced symbol rules, which NIST rejects.<\/li>\n\n\n\n<li>Check for exposure, and replace any password that is reused or found in breach data, even if a meter says years.<\/li>\n\n\n\n<li>Turn on multifactor authentication or passkeys. A passkey is a sign-in credential based on public-key cryptography, stored on your device, that replaces typing a password.<\/li>\n\n\n\n<li>Store passwords in a reputable password manager.<\/li>\n\n\n\n<li>Change a password when you have a reason, such as a breach or suspected compromise. NIST advises against routine periodic changes.<\/li>\n\n\n<\/ol>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"frequently-asked-questions\">Frequently asked questions<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"faq-1\">Are password crack time estimates accurate?<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">They are accurate as simple math under stated assumptions, such as 10 billion guesses per second. They are not accurate predictions of when an account will be compromised, because real attacks vary in speed, order and method.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"faq-2\">Can \u201ceons\u201d mean a password is uncrackable?<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">No. Eons is an illustrative model output. It does not cover phishing, reuse, malware or a password already exposed in a breach, so it is never a security guarantee.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"faq-3\">Why might a long password still be weak?<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">If it follows a predictable pattern, uses personal details or appears in breach data, attackers can reach it early. Length helps most when characters or words are chosen randomly.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"faq-4\">Does 10 billion guesses per second apply to website logins?<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Not realistically. Services can throttle or lock repeated failed attempts. The figure is better read as a rough model for offline guessing against stolen hashes.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"faq-5\">Does a leaked hash reveal my password?<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Not automatically. An attacker must still test guesses against it, and salted, deliberately expensive hashing makes each guess costlier. Weak or common passwords remain more exposed.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"faq-6\">Is it safe to type my real password into a checker?<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">The Password Ideas pages say analysis runs locally in your browser. As a habit, use only tools whose privacy approach you trust. If unsure, test a similar sample with the same structure instead.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"faq-7\">Should I change a strong password regularly?<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Not on a schedule. NIST advises against routine periodic changes. Change a password after a breach, suspected compromise or if you find it reused or exposed.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"next-steps\">Next steps<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">So, are password crack time estimates accurate? They are useful for comparing options and unreliable as a promise. Years or eons describes a model, not your real risk.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Recap: use a long, random, unique password or passphrase for each account, check it against breach data, turn on multifactor authentication or passkeys, and change a password when you have a reason. The free <a href=\"https:\/\/passwordideas.net\/downloads\/password-safety-checklist\" title=\"Password Safety Checklist (PDF)\">Password Safety Checklist<\/a> keeps these steps handy.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Related tools and resources on Password Ideas:<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/passwordideas.net\/blog\/high-password-entropy-but-weak-strength-score\/\">High Password Entropy But Weak Strength Score<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/passwordideas.net\/password_strength_tester\">Password Strength Checker<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/passwordideas.net\/downloads\/password-safety-checklist\">Password Safety Checklist (PDF)<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/passwordideas.net\/passphrase_generator\">Passphrase Generator<\/a><\/li>\n\n\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"sources\">Sources and further reading<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/pages.nist.gov\/800-63-4\/sp800-63b\/passwords\/\" target=\"_blank\" rel=\"noopener\">Strength of Passwords<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/cheatsheetseries.owasp.org\/cheatsheets\/Password_Storage_Cheat_Sheet.html\" target=\"_blank\" rel=\"noopener\">Password Storage &#8211; OWASP Cheat Sheet Series<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/haveibeenpwned.com\/API\/v3\" target=\"_blank\" rel=\"noopener\">Have I Been Pwned: API Documentation<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/pages.nist.gov\/800-63-4\/sp800-63b\/authenticators\/\" target=\"_blank\" rel=\"noopener\">Authenticators<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/www.cisa.gov\/topics\/cybersecurity-best-practices\" target=\"_blank\" rel=\"noopener\">Cybersecurity Best Practices | Cybersecurity and Infrastructure Security Agency CISA<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/csrc.nist.gov\/pubs\/sp\/800\/63\/4\/final\" target=\"_blank\" rel=\"noopener\">SP 800-63-4, Digital Identity Guidelines | CSRC<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/haveibeenpwned.com\/Passwords\" target=\"_blank\" rel=\"noopener\">Have I Been Pwned: Pwned Passwords<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/haveibeenpwned.com\/FAQs\" target=\"_blank\" rel=\"noopener\">Have I Been Pwned: Frequently Asked Questions<\/a><\/li>\n\n\n<\/ul>\n\n\n","protected":false},"excerpt":{"rendered":"<p>Are password crack time estimates accurate? See why \u201cyears\u201d is a model, how online and offline attacks differ, and what to do beyond the number.<\/p>\n","protected":false},"author":1,"featured_media":122,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[9],"tags":[59,31,57,55,10,58,56],"class_list":["post-119","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-password-strength-and-entropy","tag-breach-checking","tag-nist-password-guidance","tag-offline-password-attacks","tag-password-crack-time","tag-password-entropy","tag-password-hashing","tag-password-strength-checker"],"_links":{"self":[{"href":"https:\/\/passwordideas.net\/blog\/wp-json\/wp\/v2\/posts\/119","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/passwordideas.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/passwordideas.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/passwordideas.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/passwordideas.net\/blog\/wp-json\/wp\/v2\/comments?post=119"}],"version-history":[{"count":5,"href":"https:\/\/passwordideas.net\/blog\/wp-json\/wp\/v2\/posts\/119\/revisions"}],"predecessor-version":[{"id":128,"href":"https:\/\/passwordideas.net\/blog\/wp-json\/wp\/v2\/posts\/119\/revisions\/128"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/passwordideas.net\/blog\/wp-json\/wp\/v2\/media\/122"}],"wp:attachment":[{"href":"https:\/\/passwordideas.net\/blog\/wp-json\/wp\/v2\/media?parent=119"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/passwordideas.net\/blog\/wp-json\/wp\/v2\/categories?post=119"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/passwordideas.net\/blog\/wp-json\/wp\/v2\/tags?post=119"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}