How to Use the Password Strength & Shannon Entropy Crack Time Meter
-
1
Enter any passphrase or generated password into the tester.
-
2
Inspect the total entropy score in bits ($E = L \log_2 N$).
-
3
Read estimated brute-force crack times across modern hardware (Fast GPU hashcat clusters vs. slow online web forms).
Practical Example & Use Case
Common Real-World Scenario
Proving why a 4-word passphrase like "correct-horse-battery-staple" has higher entropy and takes 500 million years longer to crack than `P@ssw0rd1!`.
Technical Notes & Limitations
Browser Engine Architecture
Checks character pool sizes, dictionary words, and common pattern repetitions locally.
Frequently Asked Questions
How many bits of entropy are considered secure?
60 bits is moderately secure for consumer accounts. Over 80 bits is considered cryptographically robust against nation-state GPU clusters.