It depends on the level of password complexity. A standard 8 letter password with recommended complexity would generate a search space of a few hundred trillion passwords. That would take a very long time, but certainly, not forever. Now GUIDs will give you a run for your money.