Password Combination Calculator

Password strength grows exponentially with length and character variety.

How the Math Works

The Password Combination Calculator uses fundamental principles of combinatorics to determine password strength. The core formula, combinations = charset^length, calculates every possible password by raising the number of available characters (charset) to the power of the password length. For instance, a 4-character password using only lowercase letters (charset=26) yields 26^4 = 456,976 possible combinations. The entropy formula, entropy = length * log2(charset), measures the unpredictability in bits, representing how many binary decisions are needed to guess the password. Higher entropy values indicate exponentially stronger security, as each additional bit doubles the number of possible combinations an attacker must test.

Practical Applications

To use this calculator effectively, first determine your character set by identifying which types of characters your password policy allows: lowercase letters (26), uppercase letters (26), digits (10), and common symbols (varies by system). Multiply these together to get your total charset size. Then input your desired password length and the total charset size. For example, a password policy allowing uppercase, lowercase, digits, and 10 symbols creates a charset of 26+26+10+10 = 72 characters. A 12-character password under these rules produces 72^12 combinations with approximately 71 bits of entropy, making it extremely resistant to brute-force attacks.

Day-to-Day Use

This calculator helps you make informed decisions about password security in everyday scenarios. When creating accounts, you can quickly evaluate whether a proposed password meets security standards or needs strengthening. For organizations, it aids in setting minimum password requirements that balance security with usability. Understanding entropy helps you recognize why seemingly small changes like adding just one symbol or digit dramatically increase security. It also explains why password managers recommending longer passwords over complex character requirements are often more effective - a 16-character word-based password can have higher entropy than a 12-character mixed-character password while being easier to remember and type.

Worked example

95 printable characters, length 12 → about 73 bits of entropy.

FAQ