title: how long would it take to brute force an 8 character string vs. a 32 character string
body: <p>How long would it take to brute force a 32 character string.</p>
  
  <p>Assuming you have a web page that tells you whether the string is valid, and there is no limit to the number of requests.</p>
  
  <p>I'm using a 32 character string in a password reset link emailed to the user, and I'm wondering what the time difference would be to try all 32 characters vs. trying an 8 character string.</p>
  
  <p>Are we talking minutes, hours, days, months?</p>