(100 guesses/sec)
(10 billion/sec)
(1 trillion/sec)
How is strength calculated?
Random mode: Entropy is calculated from the character pool size and password length. A 20-character password using upper, lower, digits, and symbols has approximately 131 bits of entropy.
Memorable mode: Entropy is estimated from the pattern's actual choice space: word-list sizes, word count, and whether numbers or symbols are randomly selected. A fixed separator (like a hyphen) adds zero entropy because it is not a random choice.
Attack times are illustrative estimates based on constant-rate attack scenarios. Real attacks vary in speed, cost, and method. These numbers should not be treated as guarantees.
Use a password manager to store unique passwords for every account. Generating strong passwords is only useful if you store them securely rather than relying on memory.
Tip: Generate a unique password for each account and save it in a password manager.