[mothered]

This Is quite effective for easy to guess/commonly used passwords.

If It's a 12 character password consisting of alphanumeric, upper & lowercase, special characters with no two types In the same sequence, dedicate an entire century to crack It.

However, I've found that people are much less secure with their rar/zip passwords than they are with internet passwords. As they're usually kept locally most people just want to stop someone accidentally opening/snooping around on an unlocked pc so have a password like '888' or 'apple' - both of which are easy to get through this or using the wordlist option.

Most certainly agree.

The majority of users base their passwords on personal entities, without any form of complexity. You'll also notice that those containing numbers, are mostly at the "end" of the password, seldom at the beginning or somewhere In the middle.