- How many characters?
- 12chars
- How many different symbols?
- 95symbols
78.8383bits
Open with these values78.8383bits
Result: 78.8383 bitsEntropy is the length times log₂ of the character pool: twelve characters from the 95 printable ASCII symbols carry 78.84 bits. Every extra bit doubles the guesses an attacker needs. The figure only holds for a password a machine picked at random — a word you chose yourself is worth far less.
78.8383bits
Open with these values95.2671bits
Open with these values37.6035bits
Open with these valuesH = L × log₂(N)
Entropy measures the size of the space a password was drawn from, counted in bits. When every position is filled independently from a pool of N symbols, there are N to the power of L possible passwords, and the entropy is the base-2 logarithm of that count: H = log₂(N^L) = L × log₂(N). A bit is one yes-or-no question, so the figure says how many such questions stand between an attacker and the right string. The default settings run through it directly: each of the 95 printable ASCII symbols carries log₂(95) ≈ 6.5699 bits, and twelve independent draws carry twelve times that, 78.8383 bits. What the number does not give is a time. How long a search takes depends on how fast the attacker can guess and on what they are guessing against, and none of that appears in the formula. It also names no threshold — the strength bands that circulate for figures like these are not carried by the source cited here, so this page declares no bit count sufficient. The limitation that matters most is that entropy describes the procedure, not the characters. It is a property of how the password was chosen, which is why the same twelve characters can be worth 78.8383 bits or far less.
The formula assumes every character was drawn at random from the pool. A word, a name or a keyboard pattern is guessed long before the full pool is exhausted.
Entropy is counted in bits, so 60 bits is a billion times harder to guess than 30. Small differences in the number of bits are therefore large differences in effort.
The pool sits inside a logarithm, so widening it raises the value of each character only once. Every extra character adds the same number of bits again, which is why a long passphrase from a small pool beats a short password from a large one.
My 12-character password has 78.84 bits because the pool is 95 symbols.
That figure holds only if all twelve characters were drawn at random. A word you chose yourself, of the same length, is worth far less.
One more symbol in the pool helps as much as one more character.
A wider pool only nudges log₂(N), while each extra character adds a full log₂(N) bits again. Length is the stronger lever.
The pool size is how many different symbols my password actually uses.
It is the number of distinct symbols each position could hold — the whole set the password was drawn from.
| Length, pool | Character set | Entropy |
|---|---|---|
| 8, 26 | lowercase letters only | 37.6035 |
| 10, 52 | upper and lower case | 57.0044 |
| 16, 62 | letters and digits | 95.2671 |
| 12, 95 | full printable ASCII | 78.8383 |
| 20, 95 | full printable ASCII | 131.3971 |
Multiply the length by the base-2 logarithm of the pool size: H = L × log₂(N). Twelve characters drawn from the 95 printable ASCII symbols give 12 × log₂(95), about 78.84 bits.
A measure, in bits, of how unpredictable a randomly generated password is. Each bit doubles the number of guesses an attacker has to try, so 60 bits is a billion times harder than 30.
The number of distinct symbols each position could hold: 26 for lowercase letters, 52 for mixed case, 62 for letters and digits, and 95 for the full printable-ASCII keyboard including punctuation.
Length. The pool sits inside a logarithm, so widening it raises the value of each character only once, while every extra character adds a fixed number of bits again. A long passphrase from a small pool beats a short password from a large one.
No. The formula assumes every character was picked at random, and a word, a name or a keyboard pattern is guessed long before the full pool is exhausted. Use the figure to compare random schemes, and let a password manager do the picking.
Information, not professional advice.
Diese Seite gibt es auch auf Deutsch.
Zu Deutsch wechseln