However the comic shows that 'Tr0ub4dor&3' has only 28 bits of entropy. It is calculated as log2(a^b) where a is the number of allowed symbols and b is its length.Ī truly random string of length 11 (not like 'Tr0ub4dor&3', but more like 'J4I/tyJ&Acy') has log2(94^11) = 72.1 bits, with 94 being the total number of letters, numbers, and symbols one can choose. In this context, it can be thought of as a value representing how unpredictable the next character of a password is. On the other hand, a password such as 'correct horse battery staple' is hard for computers to guess due to having more entropy but quite easy for humans to remember.Įntropy is a measure of 'uncertainty' in an outcome. This comic says that a password such as 'Tr0ub4dor&3' is bad because it is easy for password cracking software and hard for humans to remember, leading to insecure practices like writing the password down on a post-it attached to the monitor. Title text: To anyone who understands information theory and security and is in an infuriating argument with someone who does not (possibly involving mixed case), I sincerely apologize.

Download password generator 2048