60% of MD5 password hashes are crackable in under an hour

Kaspersky analysis of >231 million leaked passwords finds that MD5-hashed passwords are highly susceptible to GPU-accelerated cracking—about 60% cracked within an hour and 48% within 60 seconds using a single high-end GPU—highlighting the continued weakness of fast hash algorithms and common password patterns; experts recommend multifactor authentication, passkeys, identity governance, and zero-trust approaches to mitigate the risk.