> assuming you can test an average of 1 password per μs (you probably can't, as passwords are usually stored using key derivation functions

You are not (usually) in control of what services use to encrypt your password, and most software in the world uses a basic hash like MD5 or SHA-256 rather than a key derivation function, meaning you are wildly, wildly underestimating the number of guesses per second here. To suggest that passwords are "usually" stored like that is just wildly incorrect. Only well-educated, high-quality engineers who care about security, a vanishingly tiny portion of the industry, even think about things like this. I still run into government services that e-mail me my password in plaintext.

---

Sorry, but edit attaching a reply to another comment here because HN rate-limits me:

> This is just completely false.

My mid-tier laptop GPU can crack the usual wordlist in under 12 hours against MD5 (46 billion guesses per second), or about 3 days against SHA-256 (6.5 billion guesses per second). A desktop 4090 would likely crack SHA-256 in under a day (on average).

I make claims with confidence because I am speaking about facts. Why are you making claims with confidence when you have no idea what you're talking about? The quality of discourse on this site is so, so low.