I'd be interested to know, how easy is it to actually break the hash of the password-code
If your password is common (see something like https://github.com/danielmiessler/SecLists/tree/master/Passw...) or <10 ASCII characters, it shouldn't take too long.
NTLM is a generic authentication layer. You use it to get single sign-on for your web APIs.