Hacker News new | ask | show | jobs
by throwaway0x7E6 1273 days ago
kinda. you can calculate the number of bits of entropy in the password

8 character long alphanumeric lowercase password: (26+10)**8 = 208827064576 possible passwords. 11000010011111000100000010000100000000 in binary = 38 bits of entropy

20 character long upper+lower+numeric+other ASCII password: (26+26+10+32)**20 = 2901062411314618233730627546741369470976. 132 bits of entropy

128 bits of entropy is considered to be enough for all purposes

1 comments

Sure, but given a password I have no idea what character set it pulled from. I could have an alphanumeric character set and still randomly generate “aaaaaaaaaa” which is obviously insecure.