they account for more than a quarter of cyber breaches. >> that is passwords being cracked in real time. >> reporter: to show how easy it is, last year trustwave analyst had me enter a seven- character password. >> we can make almost 91 billion guesses per second. >> reporter: it didn't take long to crack. >> here's your password right here. >> reporter: that's my password. 45 seconds. not even. >> about 37. >> reporter: 37 seconds. >> 37 seconds. >> reporter: well, that's scary. >> reporter: he says seven or eight characters are no longer enough. >> computer hardware has reached this point where we're able to attack them so quickly, that a password that small just isn't practical anymore. you know, especially for incredibly sensitive things like financials, online banking. >> reporter: even facebook founder mark zuckerberg has made that mistake. his twitter and pinterest accounts were hacked sunday. the hacker even posted the password he re-used, dada,