A computer can guess over 100B passwords per second.Still think yours is secure?

The problem with this statement is that no computer can test 100B passwords against today’s authentication mechanisms in any meaningful way without being blocked or IP banned. A worm or other distributed mechanism is the only way to test any large number of passwords against a viable authentication mechanism so as to require the mechanism to block ALL IP access or disable the account.

So, yeah, your password is probably safe unless it’s something ridiculously simple.

Enable 2FA and your accounts are virtually impregnable, unless of course you have already been compromised before doing so.