Compute total possible password combinations based on character sets and length
Powered by combinatorics · Security Tools
User Ratings:
ADVERTISEMENT
ADVERTISEMENT
When you’re creating a password, the number of possible combinations determines how resistant it is to brute-force attacks. A password with only lowercase letters has 26 possible characters per position, while a password with uppercase, lowercase, numbers, and symbols has 94. The difference is enormous: an 8-character password with all character sets has about 6.63 quadrillion combinations, while a lowercase-only 8-character password has just 208 billion. Understanding this difference helps you make better security decisions.
This password combination calculator helps you understand the math behind password strength. Select the character sets you want to include, lowercase, uppercase, numbers, and symbols and set the length. The tool computes the total number of possible combinations, displays it in scientific notation, calculates the entropy in bits, and gives a strength rating from “Very Weak” to “Very Strong.” Whether you’re a security-conscious user evaluating password policies, a developer building authentication systems, or a student learning about cryptography, this calculator delivers accurate results instantly. All calculations run locally in your browser, keeping your data private.
Select the character sets you want to include in your password, choose from Lowercase (26), Uppercase (26), Numbers (10), and Symbols (32).
Enter the password length using the input field, the number of characters in the password.
Click one of the quick example buttons to load common scenarios like an 8-character password with all sets or a 12-character alphanumeric password.
Review the character set size, total combinations, scientific notation, entropy in bits, and strength rating.
Use the Copy button to save results or Share to send them to others.
The calculator applies the fundamental principles of combinatorics to determine the total number of possible passwords for a given character set and length. The calculation is based on the number of possible characters per position raised to the power of the password length.
Formula: Total Combinations = (Character Set Size)^(Password Length)
For example, if you use all four character sets (lowercase + uppercase + numbers + symbols), the character set size is 26 + 26 + 10 + 32 = 94. For an 8-character password, the total combinations are 94^8.
Formula: Entropy (bits) = log₂(Character Set Size) × Password Length
Entropy measures the unpredictability of a password in bits. Each bit of entropy doubles the number of possible passwords. A password with 50 bits of entropy is significantly stronger than one with 30 bits.
Formula: Strength Rating
The calculator maps entropy to a strength rating:
Very Weak: < 20 bits
Weak: 20–35 bits
Medium: 36–51 bits
Strong: 52–69 bits
Very Strong: ≥ 70 bits
The calculator uses JavaScript’s exponentiation to compute the total combinations and displays the result in both standard and scientific notation.
Consider an 8-character password that uses all four character sets: lowercase (26), uppercase (26), numbers (10), and symbols (32). What’s the total number of possible combinations and the entropy?
Step 1: Calculate the character set size
Total = 26 + 26 + 10 + 32 = 94
Step 2: Calculate the total combinations
Combinations = 94^8 = 6,634,204,312,890,625 ≈ 6.63 × 10¹⁵
Step 3: Calculate the entropy
Entropy = log₂(94) × 8 = 6.55 × 8 = 49.3 bits
Step 4: Determine the strength rating
49.3 bits falls in the “Strong” range (36–51 bits).
Interpretation: An 8-character password using all character sets has about 6.63 quadrillion possible combinations and 49.3 bits of entropy, which is considered strong. At 1 billion guesses per second, it would take about 6.6 million seconds (about 77 days) to try all combinations — but in practice, the average time is half that. Increasing the length to 12 characters raises the entropy to 74 bits and the combinations to 5.4 × 10²³, making it virtually uncrackable.
Computes total combinations, entropy, and strength rating in one step.
Supports all four character set categories: lowercase, uppercase, numbers, and symbols.
Displays results in standard and scientific notation for large numbers.
Shows entropy in bits and a clear strength rating from “Very Weak” to “Very Strong.”
Includes quick example buttons for common password scenarios.
Runs entirely client-side with no server communication, keeping your data private.
Perfect for security-conscious users, developers, students, and educators.
Free to use on any device with responsive design.
Password entropy is a measure of unpredictability, expressed in bits. Each bit of entropy doubles the number of possible passwords. A password with 50 bits of entropy is twice as strong as one with 49 bits. Entropy is calculated as log₂(character set size) × length.
A good password should have at least 50 bits of entropy for moderate security, and 70+ bits for strong security. An 8-character password with all character sets has about 49.3 bits, which is considered strong. A 12-character password with all sets has 74 bits, making it very strong.
Entropy is measured in bits and represents the logarithm (base 2) of the number of possible combinations. Combinations is the total number of possible passwords. A password with 50 bits of entropy has 2^50 ≈ 1.12 × 10¹⁵ possible combinations.
Adding symbols increases the character set size from 62 (lowercase + uppercase + numbers) to 94. For an 8-character password, this increases entropy from 47.7 bits to 49.3 bits, a meaningful improvement. For longer passwords, the difference is even larger.
With all four character sets (94 characters), an 8-character password has 94^8 = 6,634,204,312,890,625 combinations, about 6.63 quadrillion. This is equivalent to 49.3 bits of entropy.
There’s no single “strongest” length, it depends on the character set. With all character sets, 12 characters provide 74 bits of entropy (very strong), 16 characters provide 105 bits, and 20 characters provide 131 bits. Longer passwords are always stronger, but usability trade-offs must be considered.
Entropy is calculated as log₂(character set size) × password length. For example, with a 94-character set and 8-character length: log₂(94) ≈ 6.55, multiplied by 8 = 49.3 bits. The calculator does this automatically.
A password is typically a short string of characters, while a passphrase is a longer phrase made of multiple words. Passphrases often have lower character set variety but much greater length, which can make them stronger. The calculator can be used for passphrases by considering the character set as the number of possible words.
ADVERTISEMENT
ADVERTISEMENT
