Computers · security

Password Strength & Crack Time

Length beats complexity, by orders of magnitude — and here is the arithmetic.
entropy

Build one

random characters

Strength

built
Entropy
Compared
Where these numbers come from Search-space arithmetic is exact. The guess RATES it is compared against are published benchmark figures for offline attacks and move quickly with hardware.
The comparison

What one more of each is worth

Adding a character to a random password buys you log₂(95) = 6.6 bits. Adding a word to a Diceware passphrase buys log₂(7776) = 12.9 bits — almost exactly twice as much, and a word is far easier to remember than a symbol. That is the whole argument, and it is why the advice everyone was given about symbols and digits was backwards.

Field notes

What the strength meters get wrong

How it works

Bits, and who is guessing

Entropy measures how many equally likely possibilities a password was drawn from. It is a property of the process that generated it, not of the characters that came out — which is the single thing most strength meters get wrong.

The arithmetic

bits = length × log₂(alphabet size) for a randomly generated string, or bits = words × log₂(list size) for a passphrase. Cracking time is 2^(bits−1) ÷ guesses per second — half the keyspace on average.

Why "crack time" is meaningless alone

The same password takes minutes or millennia depending entirely on who is guessing. A rate limit of ten attempts a second and an offline attack on a fast unsalted hash at 10¹² guesses/second are eleven orders of magnitude apart. Any single number quoted without naming the attacker is theatre.

Worked example

Eight random characters from a 95-character set is 52.6 bits — about 55 minutes against a fast offline attack. Five Diceware words is 64.6 bits, or 165 days. Six words is 77.5 bits: roughly 3,500 years. The passphrase is easier to remember and about 4,000× harder than the eight random characters.

Is my password sent anywhere?

No. Everything on this page runs in your browser, there is no analytics on the site, and nothing is transmitted, stored or logged. You can check by opening developer tools and watching the network tab, or by disconnecting from the internet — the page keeps working, because it is all local.

Why does a strength meter say my password is strong when this says it is weak?

Because most meters count character classes rather than guessability. They see a capital, a digit and a symbol and award points. P@ssw0rd! has all three and is among the first few thousand guesses any real attacker makes. Entropy comes from how the password was chosen, and a meter cannot see that.

Are the substitutions worth anything?

Almost nothing. Replacing a with @ and o with 0 adds roughly one bit each against an attacker whose wordlist already applies those rules — which every real cracking tool does. You get the illusion of complexity and pay for it in memorability.

How many words do I actually need?

Four is enough for anything rate-limited. Five is a sensible floor for an account that matters. Six puts you past what is feasible offline for the foreseeable future. The words must be chosen randomly — picking them yourself collapses the entropy, because people do not pick uniformly.

What this page assumes

That the password was generated uniformly at random from the alphabet or wordlist you specified. Anything you type in is scored by the cheapest way to guess it: the string is cut into the patterns an attacker actually enumerates — dictionary words, leet spellings, keyboard runs, sequences, repeats, dates and plain digit runs — and each is priced by how many candidates it stands for. Because the built-in wordlist is only a few hundred entries, a second, pessimistic figure assumes every plausible word is in the attacker's dictionary. The lower of the two is shown, which is the one worth planning against. Not modelled: credential stuffing from a breach elsewhere, phishing, keyloggers, password reuse, or any attack that does not involve guessing. Guess rates are published 2026 benchmark figures for a single high-end GPU, multiplied by the rig you pick. They are the input most likely to be out of date, and they only ever move one way.

Nothing you type leaves your browser. There is no analytics on this site and no network request is made while you use this page. That said, a strong password does not protect a reused one — a breach elsewhere hands it over regardless of entropy, which is what a password manager and two-factor authentication are for.
Version history · 1 release
  1. v3.82026-08-13The password tool stopped counting character classes and started pricing the cheapest way to guess the string — P@ssw0rd1! fell from 66 bits to 21

Releases in which this page changed, newest last. Derived from the archived copy of every release, not from notes written afterwards — so it reflects what actually shipped. Site-wide passes are left out; they are in the full changelog.