How much entropy does BIP39 have?
How long would brute forcing take?
Can a 2nd factor be included on a wallet, to lock, unlock it?
Cardano Stack Exchange is a question and answer site for users and developers of the Cardano cryptocurrency ecosystem. It only takes a minute to sign up.
Sign up to join this communityI'd take a look at this answer
It seems a very well resourced attacker would be able to find a used private key for 128bit seed. This would be an attack on all keys in the network, not yours specifically. For 256bit seed, it should be infeasible.
128 bit for 11 seed word and 256 for 27 seed word for 128 bit 1.02 x 10^18 years.
You should know that if you generate a wallet with the help of cardano-wallet utility you will be proposed two options: general-factor 24-word seed (2048²⁴ or 2²⁶⁴ possible combinations) and optional second-factor 12-word seed (2048¹² or 2¹³² possible combinations).
That's a real nightmare for a hacker because it's practically impossible to brute force it.