Analyzing a Strong Password

Analyzing a Strong Password

This example demonstrates the XKCD passphrase approach: four random words joined by hyphens. Despite having no uppercase letters, digits, or special characters, it scores high because of its length and entropy.

What You Will See

• Score: 3-4 (Strong to Very Strong) - High entropy from length and word randomness
• Crack time: centuries - Even offline attacks cannot brute-force this in any meaningful timeframe
• Patterns detected: May flag individual dictionary words, but the combination is unique
• Entropy: ~103 bits - Well above the 80-bit threshold for strong security

How to Use

1. The passphrase “correct-horse-battery-staple” is pre-filled
2. Compare the crack time estimates to the weak password example
3. Notice how entropy increases with each additional word
4. Try removing words to see how the score drops (3 words is weaker, 5 words is stronger)
5. This passphrase does not appear in any known breach database