Nothing you type here is sent anywhere, every calculation runs locally in your browser. Estimate assumes 10 billion guesses per second, a commonly cited benchmark for an offline attack against a stolen, unsalted password hash.
Built by Rankite, the SEO team behind Swordfish AI's +400% revenue and Zluri's +45% organic growth. See the case studies
Entropy, measured in bits, estimates how many guesses an attacker with no other information would need to try before finding your password. It is calculated as the password's length multiplied by log base 2 of the character pool it draws from, lowercase letters add 26 possibilities, uppercase adds another 26, digits add 10, and symbols add roughly 32, so a longer password drawing from a bigger pool has exponentially more possible combinations to guess through.
The estimated crack time assumes an offline attack against a stolen, unsalted password hash at 10 billion guesses per second, a commonly cited benchmark for what a modern GPU rig can achieve against a fast, unsalted hashing algorithm. A well-salted, slow hash like bcrypt or Argon2 would make the same password take vastly longer to crack, this number represents a realistic worst case, not a guarantee for every system.
Adding a character to a password multiplies the total number of guesses an attacker needs, while adding one more allowed symbol type only multiplies it by a much smaller factor. A long passphrase of unrelated words is typically far stronger, and much easier to remember, than a short password crammed with substitutions like swapping an letter for a number, which most modern cracking tools already account for.
Get a free, no-obligation SEO audit and a 30-minute strategy session. We'll show you exactly where the growth is hiding.
Fill out the form and we'll get back to you within one business day. Prefer email? Write to us directly at contact@rankite.com.