Password Entropy Calculator
Estimate password entropy, character pool size and crack-time ranges for online and offline attacks.
Maintained by Aygul Dovletova
How to estimate password entropy
- Type or paste a password into the field. The estimate updates locally as you type.
- Review the entropy bits. Higher bit counts mean a larger theoretical search space for brute-force guessing.
- Compare crack-time models. Online attacks, fast offline hashes and slow password hashes have very different risk levels.
- Read the warnings. Repeated characters, common words and short passwords reduce practical security even when the math looks acceptable.
What this calculator measures
The tool estimates entropy from password length and detected character pools: lowercase, uppercase, numbers and symbols. It also flags patterns that make human-generated passwords weaker than random strings with the same length.
When to use it
Use it when comparing passphrases, explaining password policy trade-offs, auditing old credentials or deciding whether a generated password is long enough for a sensitive account.
Important limitations
Entropy estimates are not breach checks. A password can score well and still be unsafe if it has appeared in a leak, was reused, or follows a personal pattern an attacker can guess.
Frequently Asked Questions
Does this upload my password?
No. The calculation runs in your browser from the text you type. The tool does not need a network request to estimate entropy or show crack-time models.
Is entropy the same as real password strength?
Not exactly. Entropy is a useful mathematical estimate, but real attackers use breached-password lists, dictionaries and transformation rules that reduce the strength of human-created passwords.
How many entropy bits should I target?
For most accounts, 60 to 80 bits is a reasonable minimum. For long-term secrets, admin accounts or encryption passphrases, prefer 80+ bits and generate the value with a password manager.
More Security & Privacy
Password Generator
Generate cryptographically secure random passwords with configurable length, character types and entropy display.
Open toolPassword Strength Checker
Check password strength with entropy calculation, pattern detection and common password matching.
Open toolSecurity Hash Generator
Generate SHA-1, SHA-256, SHA-384 and SHA-512 hashes from text or files using the Web Crypto API.
Open toolTOTP Generator
Generate time-based one-time passwords (TOTP) from a base32 secret with live 30-second countdown.
Open toolCSP Header Generator
Build Content-Security-Policy headers with a visual form, presets and per-directive configuration.
Open toolBasic Auth Header Generator
Create HTTP Basic Authentication headers from a username and password or API token.
Open tool