Because it can easily be decoded. Here is one such example of how this can be accomplished.

Just look for a line like

username chad password 7 1500020F0C

If you cut and paste the sample hash above, 1500020F0C into one of the following sites, and hit submit, you will see how easy it is to determine the correct password for hash 1500020F0C is rich.

http://www2.tongzweb.com/tools/cisco.asp
http://www.ibeast.com/content/tools/CiscoPassword/index.asp

It is suggested to use the secret 5 instead that is based on MD5 (Message Digest 5). The secret 5 MD5 uses higher-bit encryption level which makes the secret is much more difficult to decrypt. In other words, using secret 5 is more secure than password 7.

got feedback? got feedback?

Any feedback you provide is sent to the owner of this FAQ for possible incorporation and shown publically as well.

by nozero edited by aryoba
last modified: 2011-08-11 10:25:35