Entropy
—
Length — · Pool — chars · Rating —
| Attacker | Guesses / sec | Time to crack (avg) |
|---|
| Character class | Present | Adds to pool |
|---|
How the math works
Entropy = length × log₂(pool size). Pool grows as you mix lowercase (+26), uppercase (+26), digits (+10), symbols (+33) and unicode (+~100 for first non-ASCII set). Cracking time is half the search space ÷ attacker rate.
This is a raw estimate. A real attacker uses dictionaries and rules — common phrases like "password123" fall in seconds despite "fair" entropy. Use a passphrase of 4+ random words or a manager-generated 16+ char password.