Entropy & Cryptographic Randomness
A password's security is measured mathematically by its Shannon or computational information entropy. Entropy represents the amount of unpredictability in the generated string, measured in bits. A higher entropy count means exponentially more brute-force attempts are required to guess the combination:
Entropy Calculation Formula
Password entropy is calculated based on the length of the password ($L$) and the size of the set of potential characters ($R$):
Character Pool Scales
By enabling different character sets, you expand the pool size ($R$) which dramatically compounds the total complexity:
| Character Set | Standard Pool Size ($R$) | Typical Range |
|---|---|---|
| Lowercase letters only | 26 | a to z |
| Alphanumeric (Lowercase + Uppercase + Digits) | 62 | a-z, A-Z, 0-9 |
| Full keyboard sets (Alphanumeric + Special Symbols) | 94 | Includes !, @, #, $, %, ^, &, *, (, ), etc. |
Frequently Asked Questions
Unlike online generators that transmit passwords across the internet or compute them on external web servers (where logs or interceptions can compromise them), Calculent computes all random data completely in your browser's local sandbox memory space. The keys never touch our servers or the network, ensuring 100% security and absolute privacy.
For standard logins, passwords with **60 to 79 bits** of entropy (standard "Strong" rating) offer excellent protection against online login guessing. For critical financial, master vault, or cloud hosting root credentials, you should aim for **80 bits or higher** ("Very Strong"). Generating a 16-character password with letters, digits, and symbols yields **approx. 95 bits**, making it mathematically impossible to brute-force with modern classical computing power.
Instead of standard `Math.random()` which uses a pseudo-random number generator (PRNG) that is predictable and unsuitable for security, this tool uses the standard **Web Cryptography API** (`window.crypto.getRandomValues()`). This function draws entropy directly from the underlying operating system's kernel entropy pool (e.g. hardware timings, system events), providing true cryptographic-grade randomness.