What's a "strong code"? How can password security be measured?

In code science, the criterion for the strength of a password is Entropy 。 It indicates the uncertainty contained in a password, usually in the form of "bits". The higher the entropy, the more random the password, the more difficult it is for hackers to guess through violent cracks.

Longer than complicated.

Many people think that adding a special character is safe enough, but that is not the case. Based on Informational ：

The increase in the password length to the entropy is Index Level Yeah.
Adding character type to entropy is logarithmic Yeah.

This means a 16-bit plain lowercase letter password (e. g. correcthorsebatterystaple ) usually has a complex password of 8 bits (e. g. P@ssw0rd It's harder to crack. Our tools provide you with the most scientific assessment by calculating entropy values in real time based on the size and length of the character set.

Addressing the conflict between “memory” and “security”

Humans are not good at remembering random strings (e.g., 9&kL!2pQv# But hackers are good at breaking short code. The best solution to this problem is use. Passphrases 。 Combining four or more unrelated words, both provide high entropy values and facilitate brain memory.

Watch out for common weak code patterns.

The mere fulfilment of the mandatory requirements of “long, upper, lower, numerical, symbol” does not mean that the password is always safe. The hacker's dictionary contains:

Keyboard sequence: qwerty , asdfgh , 123456 。
Common word replacement: Use 0 Replace o ♪ With ♪ @ Replace a (e.g., P@ssw0rd It is very easy to break.
Personal information: Birthday, pet name, company name or cell phone number.

Why is it so important to estimate the time of the break?

The “breaking time” we're showing is a simulation based on current mainstream computing. If a password can be broken in minutes under a hacker cluster, then it is “high risk”. We suggest that all important accounts should have a code entropy value at least. 60 bits This means that even the hacker cluster takes years to conquer.

All calculations in this tool are run in a local browser and will never upload or store any of your inputs. Please be assured of use.