Hacker News new | ask | show | jobs
by tuxone 604 days ago
I am referring to the loss of entropy compared to a (theoretically) fully random 20-chars password.
1 comments

Nit, 160 bits of entropy would be if you could get 8 bits per character, but that’s highly unrealistic. 6.0~6.3 bits is more feasible based on what most websites will tend to accept, which lands you at around 120-126 bits of entropy for a fully random password.