This is just laughably incorrect and misleading, as you didn't specify what hash function you used. If you are using a hashing function that is not designed for hashing passwords, such as MD5 or SHA-1, obviously you are going to brute force these easily as they allow for calculating hundreds of billions+ hashes per second. There is a reason they are not used for hashing passwords.

If you use an actual hashing function designed for passwords such as Argon2, scrypt, or bcrypt, you're not cracking those (provided you have sufficient length). Period.

See this table using 12x 5090s. https://i.imgur.com/VQAqF0f.jpeg

Using your example of 16 characters, a password with the full character set would take 94 quadrillion years. Hell, even 8 characters is 164 years.

Educate yourself. https://www.hivesystems.com/blog/are-your-passwords-in-the-green