Alec Muffett

Career

Alec Muffett began his professional career in the technology industry when he joined Sun Microsystems in 1992, initially working as a systems administrator. Over the following years he advanced within the company, eventually reaching the position of principal engineer for security, a role he held until 2009 when he was retrenched alongside many colleagues shortly before Oracle's acquisition of Sun Microsystems.

Notable Work

Muffett is widely recognized as the creator of Crack, the original password cracker for Unix systems. This tool became a foundational reference in the field of Unix security, providing system administrators and security researchers with a means to audit password strength. Alongside Crack, he developed CrackLib, a password-integrity testing library designed to help enforce stronger password policies at the system level.

During his tenure at Sun Microsystems, Muffett was among the researchers who contributed to the factorization of RSA-155, a 512-bit RSA Challenge Number. This factorization was completed successfully in August 1999 and represented a significant milestone in demonstrating the practical vulnerabilities of 512-bit RSA keys.

In a later phase of his career, Muffett played a notable role in expanding the availability of privacy-preserving infrastructure for major media and technology organizations. He assisted in the creation of .onion websites — services accessible via the Tor anonymity network — for a range of prominent organizations including The New York Times, Wikipedia, BBC News, Brave, Twitter, The Guardian, and Reddit. This work contributed meaningfully to the broader adoption of Tor-based access as a legitimate and supported channel for reaching major online platforms.

Recognition

In 2015, SC Magazine named Muffett one of the top six influential security thinkers, recognizing his sustained contributions to the field of internet security across multiple decades.