If you thought that your 8 character WPA password was secure, think again. Thanks to the handy-dandy GPU, cracking weak WPA/WPA-2 PSK passwords has never been easier.
According the Elcomsoft, their Wireless Security Auditor can work completely off-line and find passwords by analyzing a dump of network communications, and display them in plain text.
What this means, is that if you’ve got a WPA protected network, you should probably bump your 8 character password up to at least 12 characters. According to David Hobson, “It's a wake-up call to IT managers, pure and simple. IT managers should now move to 12 and even 16 character keys as a matter of urgency. It's not very user-friendly, but the potential consequences of staying with eight character keys do not bear thinking about.”
