Every year, billions of credentials leak from breached websites, and every year the same pattern shows up in the data: people choose short passwords, reuse them everywhere, and add predictable twists like a capital letter and an exclamation mark. Attackers know this. Modern password cracking is not a hooded figure guessing one password at a time — it is software testing trillions of combinations per second against lists of leaked passwords, tuned to human habits.
The good news is that the math of what makes a password hard to guess is simple, and once you understand it, you can build passwords that are effectively uncrackable without memorizing anything bizarre. This guide explains that math, then shows the practical setup — passphrases, a password manager, and two-factor authentication — that follows from it.
What "strong" actually means: entropy
Password strength is measured in entropy, a number of bits that describes how many different passwords an attacker would need to try in the worst case. Each additional bit doubles the work. The formula is straightforward:
entropy (bits) = length × log₂(alphabet size)
A lowercase-only password has an alphabet of 26 characters, and log₂(26) is about 4.7 bits per character. Add uppercase (26 more), digits (10), and symbols (~32), and you get roughly 6.5 bits per character. The table below shows how this translates into resistance against an offline attack — one where the attacker has stolen a password database and can test guesses at high speed:
| Password | Length | Entropy | Time to crack (10¹² guesses/sec) |
|---|---|---|---|
| summer2026 | 10 | ~20 bits* | seconds |
| Xk9!mP2$ | 8 | 52 bits | ~weeks |
| 7Hq$vLp2#fRm | 12 | 78 bits | centuries |
| correct-horse-battery-staple | 28 | ~88 bits* | effectively forever |
*Dictionary words carry less entropy than their length suggests, because crackers try word combinations — but four random words from a 5,000-word list still carry about 51 bits, and a longer random phrase carries far more. The takeaway is visible in the table: length multiplies; symbols only add. An 8-character password with every character class is weaker than a 12-character one with two classes.
Why "replace a with @" no longer works
Cracking software runs dictionaries through substitution rules automatically: it tries "password", "p@ssword", "p@ssw0rd", "Password123!", and millions of rule-based variants before it ever starts brute-forcing. These substitutions add almost no real entropy because they are predictable. The same applies to keyboard walks (qwerty, 1qaz2wsx), names plus years (Jessica1990), and anything based on a favorite sports team or band. If a pattern has a name, it is already in the cracker's rulebook.
Real strength comes from randomness — genuinely unpredictable characters — or from length combined with unpredictability. That is why the NIST digital identity guidelines, the US standard that most security teams follow, recommend length and screening against breached-password lists over forced complexity rules.
Passphrases: strong and memorable
The simplest way to get both strength and memorability is a passphrase: four or more unrelated words joined together, like "cobalt-mitten-drift-tundra". Four random words from a 5,000-word vocabulary carry about 52 bits of entropy — comparable to an 8-character fully random password — and are dramatically easier to remember and type. Five or six words push past 65 bits, which is beyond any realistic offline attack.
The critical word is random. "Never-gonna-give-you-up" has four words but near-zero entropy, because it is a famous lyric that every cracking rulebook tries. Use a generator (ours is the SearCalc password generator, which runs entirely in your browser), or roll physical dice with a word list. Never invent the phrase yourself — human-chosen anything is predictably biased.
The setup professionals actually use
Nobody memorizes 80 unique 20-character passwords. The realistic strategy has three parts:
- A password manager generates and stores unique random passwords for every site. You memorize one long master passphrase (six words or more) and the manager handles the rest. Uniqueness matters as much as strength: when one site is breached, reused credentials let attackers break into your email, then your bank, in what is called credential stuffing.
- Two-factor authentication (2FA) on every account that supports it. A stolen password plus 2FA is usually still a failed attack. App-based codes (TOTP) or hardware keys are meaningfully safer than SMS codes, which can be intercepted through SIM-swap attacks.
- Check yourself against breach data. Services like Have I Been Pwned let you see whether your email or existing passwords have appeared in known leaks. If they have, change them — starting with your email account, which is the recovery key to everything else.
How long is long enough in 2026?
For a random password generated by software: 16 characters mixing letters, digits, and symbols is comfortably strong for anything ordinary. 20+ characters is where security professionals land for anything sensitive, and it costs nothing — the manager types it, not you. For a master passphrase you must remember: six random words. For anything protecting crypto wallets or root access, add a hardware security key and stop relying on passwords alone.
One last habit worth building: when a service you use announces a breach, change that password immediately and anywhere you reused it. The 2026 threat model is not a genius picking your lock — it is a bot replaying yesterday's leaks. Unique, long, random credentials close that door.