https://passwordhive.net/https://passwordhive.net/images/content/password-strength-checker/password-strength-rating-scale-entropy-formula.svgPassword strength formula and rating scaleWhere the 12-character example lands on the rating scale.https://passwordhive.net/images/content/password-strength-checker/password-strength-test-results-ranked.svgPassword strength test results ranked by entropySix password patterns ranked by entropy, with time to crack beside each.https://passwordhive.net/images/content/password-strength-checker/password-strength-entropy-by-length-and-character-pool.svgPassword entropy by length and character poolEntropy by length and character pool: length shifts the result more than adding symbols.https://passwordhive.net/password-generatorhttps://passwordhive.net/images/content/password-generator/password-generator-entropy-formula.svgPassword entropy formulaHow the entropy formula turns a 16-character setting into 104.9 bits.https://passwordhive.net/images/content/password-generator/random-password-entropy-by-length-and-character-pool.svgPassword entropy by length and character poolEntropy by password length and character pool; the outlined cell is the worked example.https://passwordhive.net/images/content/password-generator/passphrase-vs-random-password-entropy-ranking.svgPassphrase versus random password entropyRandom passwords and passphrases ranked by entropy in bits.https://passwordhive.net/passphrase-generatorhttps://passwordhive.net/images/content/passphrase-generator/passphrase-generator-entropy-formula-waterfall.svgPassphrase entropy build-upEntropy builds up word by word: five random words plus one digit reach 67.9 bits.https://passwordhive.net/images/content/passphrase-generator/passphrase-crack-time-by-word-count.svgPassphrase crack time by word countAverage offline crack time by word count, at one trillion guesses per second.https://passwordhive.net/pin-generatorhttps://passwordhive.net/images/content/pin-generator/pin-generator-possible-pins-formula.svgPIN possibilities formula by lengthPossible PINs by length: repeats allowed versus every digit different.https://passwordhive.net/images/content/pin-generator/random-pin-entropy-repeats-vs-no-repeats.svgPIN entropy with and without repeatsTurning on no duplicate numbers costs between 1 and 6 bits of entropy.https://passwordhive.net/images/content/pin-generator/pin-code-lockout-time-to-exhaust-heatmap.svgDays to try every PIN under a lockoutDays to try every PIN under a 10-tries-then-15-minutes lockout.https://passwordhive.net/wifi-password-generatorhttps://passwordhive.net/images/content/wifi-password-generator/wifi-password-entropy-by-length-and-character-pool.svgWiFi password entropy by length and character poolEntropy in bits by length and pool: each extra character adds far more than a bigger pool.https://passwordhive.net/images/content/wifi-password-generator/wifi-password-strength-scale-by-length.svgWiFi password strength scale by lengthWhere 8, 12, 16 and 18 characters land between weak and strong.https://passwordhive.net/images/content/wifi-password-generator/wifi-password-generator-character-pool-breakdown.svgCharacter pool breakdown for a WiFi passwordThe 87-symbol pool used in the worked example: all four character types, minus seven look-alikes.https://passwordhive.net/bcrypt-generatorhttps://passwordhive.net/images/content/bcrypt-generator/bcrypt-hash-string-anatomy.svgBcrypt hash string anatomyThe parts of the worked-example bcrypt hash string.https://passwordhive.net/images/content/bcrypt-generator/bcrypt-cost-factor-time-per-hash.svgBcrypt cost factor timelineTime to hash one password at each cost factor.https://passwordhive.net/password-hash-generatorhttps://passwordhive.net/images/content/password-hash-generator/hash-generator-digest-length-formula.svgHash digest length formula and sizesEach hexadecimal character holds 4 bits, so digest length in characters is the bit size divided by four.https://passwordhive.net/images/content/password-hash-generator/hash-avalanche-effect-bits-changed.svgAvalanche effect bits changedAdding one full stop to the invoice note flips 60 of 128 MD5 bits, 121 of 256 SHA-256 bits and 259 of 512 SHA-512 bits.https://passwordhive.net/wordpress-password-hash-generatorhttps://passwordhive.net/images/content/wordpress-password-hash-generator/wordpress-password-hash-format-timeline.svgWordPress hash format timelineWordPress password hash formats by era: pick the portable $P$ phpass format when you are unsure of the version.https://passwordhive.net/images/content/wordpress-password-hash-generator/wordpress-password-hash-anatomy.svgWordPress password hash anatomyAnatomy of the worked-example hash: 22 digest characters, an 8-character salt, the $P$ marker and one rounds character.https://passwordhive.net/password-entropy-calculatorhttps://passwordhive.net/images/content/password-entropy-calculator/shannon-entropy-calculator-four-probabilities-waterfall.svgShannon entropy contributions by categoryEach category's slice of Shannon entropy adds up to 1.782 bits, 89.1% of the 2-bit maximum for four outcomes.https://passwordhive.net/images/content/password-entropy-calculator/entropy-change-isothermal-ideal-gas-expansion-curve.svgEntropy change of an isothermal ideal gas expansionEntropy change of an isothermal ideal gas climbs quickly at first, then flattens as the volume ratio grows.https://passwordhive.net/images/content/password-entropy-calculator/password-entropy-bits-by-length-and-character-pool.svgPassword entropy heatmapPassword entropy in bits by length and character pool; each extra character adds about 5.95 bits at a pool of 62.https://passwordhive.net/password-crack-time-calculatorhttps://passwordhive.net/images/content/password-crack-time-calculator/password-strength-entropy-formula-and-rating-scale.svgEntropy formula and password strength rating scaleThe 12-character example scores 71.45 bits, which lands in the good band.https://passwordhive.net/images/content/password-crack-time-calculator/crack-time-by-password-length-and-attack-speed.svgCrack time heatmap by password length and attack speedAverage time to crack by length and attack speed, with the 12-character worked example outlined.https://passwordhive.net/images/content/password-crack-time-calculator/password-entropy-length-vs-character-set.svgPassword entropy: length vs character setLength adds more entropy than a bigger character set.https://passwordhive.net/password-pattern-analyzerhttps://passwordhive.net/password-policy-validatorhttps://passwordhive.net/images/content/password-policy-validator/password-policy-validator-rule-results-grid.svgPassword policy validator rule results gridPass/fail results for four candidates across the nine-rule worked example.https://passwordhive.net/images/content/password-policy-validator/password-strength-search-space-by-length.svgPassword strength search space by lengthLength drives the theoretical search space more than character mix.https://passwordhive.net/aes-encryption-key-generatorhttps://passwordhive.net/images/content/aes-encryption-key-generator/aes-key-size-hex-vs-base64-characters.svgAES key text length by sizeHex versus Base64 text length for each AES key size.https://passwordhive.net/images/content/aes-encryption-key-generator/aes-256-key-length-hex-vs-base64-formula.svgAES-256 key length formulaThe two length formulas for a 32-byte key.https://passwordhive.net/images/content/aes-encryption-key-generator/aes-256-brute-force-time-comparison.svgAES brute-force time by key sizeAverage brute-force years by key size, shown as powers of ten.https://passwordhive.net/totp-code-generatorhttps://passwordhive.net/images/content/totp-code-generator/totp-code-generator-counter-and-time-step.svgTOTP code formula with time step positionHow one counter value becomes the 6-digit code 633493, and how far into its 30-second step 03:22:47 falls.https://passwordhive.net/images/content/totp-code-generator/totp-code-refresh-timeline-grace-window.svgTOTP codes across four time stepsThe code changes at each 30-second boundary; a one-step grace window accepts the neighbours of the current code.https://passwordhive.net/images/content/totp-code-generator/totp-hash-algorithm-comparison-sha1-sha256-sha512.svgTOTP hash algorithm comparisonThe same secret and instant give a different code under each hash algorithm.https://passwordhive.net/totp-secret-generatorhttps://passwordhive.net/images/content/totp-secret-generator/totp-secret-size-entropy-and-base32-length.svgTOTP secret size, entropy and Base32 lengthEntropy and Base32 length by secret size.https://passwordhive.net/images/content/totp-secret-generator/totp-code-guess-odds-by-digits-and-window.svgTOTP guess odds by digit length and windowGuess odds by digit length and verification window.https://passwordhive.net/images/content/totp-secret-generator/totp-code-time-step-verification-window.svgTOTP time step and verification windowOne 30-second step and its verification window.https://passwordhive.net/two-factor-qr-code-generatorhttps://passwordhive.net/images/content/two-factor-qr-code-generator/two-factor-qr-code-otpauth-uri-breakdown.svgotpauth URI character breakdownThe 144-character setup link behind the QR image, by part.https://passwordhive.net/images/content/two-factor-qr-code-generator/two-factor-qr-code-generator-totp-formula.svgTOTP counter to 6-digit codeHow the example timestamp turns into the 6-digit code 529268.https://passwordhive.net/images/content/two-factor-qr-code-generator/2fa-code-30-second-timeline.svg2FA code timelineThe same secret gives a new code every 30-second window.https://passwordhive.net/otpauth-uri-builderhttps://passwordhive.net/security-question-answer-generatorhttps://passwordhive.net/images/content/security-question-answer-generator/security-question-answer-generator-entropy-formula.svgSecurity answer entropy formulaThe entropy formula behind a random security answer, worked for three words from a 7,776-word list.https://passwordhive.net/images/content/security-question-answer-generator/security-answers-honest-vs-generated-bits.svgHonest answer vs generated answer strengthAn honest pet name offers 10.0 bits; generated answers reach 25.8, 38.8 and 51.7 bits.https://passwordhive.net/images/content/security-question-answer-generator/security-answer-strength-by-word-count.svgSecurity answer strength by word countAnswer strength in bits by word count and list size.https://passwordhive.net/email-alias-generatorhttps://passwordhive.net/images/content/email-alias-generator/gmail-dot-trick-aliases-by-dot-count.svgGmail dot trick aliases by number of dotsThe 512 dot variations of noorhaddad grouped by how many dots they contain.https://passwordhive.net/images/content/email-alias-generator/email-alias-generator-dot-variations-formula.svgDot variations formula by name lengthDot variations double with every extra letter in the name.https://passwordhive.net/base64-encoder-decoderhttps://passwordhive.net/images/content/base64-encoder-decoder/base64-encoder-decoder-bytes-to-characters.svgBase64 encoding of Vault: bytes to charactersHow the first three bytes of Vault become VmF1 when the word is converted.https://passwordhive.net/images/content/base64-encoder-decoder/base64-encoding-size-overhead.svgBase64 size overhead by input lengthBase64 output runs about one third longer than the input.https://passwordhive.net/password-phonetic-readouthttps://passwordhive.net/text-to-nato-alphabet-converterhttps://passwordhive.net/bcrypt-hash-verifierhttps://passwordhive.net/images/content/bcrypt-hash-verifier/bcrypt-hash-verifier-60-character-hash-anatomy.svgBcrypt hash anatomy zone barThe example hash cut into its four parts, sized by character count.https://passwordhive.net/images/content/bcrypt-hash-verifier/bcrypt-cost-factor-time-per-hash-timeline.svgBcrypt cost factor timelineMeasured time per hash at each cost: every step doubles the work.https://passwordhive.net/file-checksum-generatorhttps://passwordhive.net/hash-type-identifierhttps://passwordhive.net/images/content/hash-type-identifier/hash-bit-length-formula-sha1-example.svgHash bit length formulaMultiply the hexadecimal characters by 4 to get the bit length: 40 characters is 160 bits.https://passwordhive.net/images/content/hash-type-identifier/hash-length-hexadecimal-vs-base64-comparison.svgHexadecimal vs base64 hash lengthThe same digest needs fewer characters in base64 than in hexadecimal.https://passwordhive.net/images/content/hash-type-identifier/bcrypt-hash-format-anatomy-timeline.svgbcrypt hash format anatomyA bcrypt hash splits into prefix and cost, a 22-character salt and a 31-character digest.https://passwordhive.net/file-checksum-comparatorhttps://passwordhive.net/images/content/file-checksum-comparator/hash-algorithm-digest-size-comparison.svgHash algorithm digest sizesDigest size in bits for each hash algorithm: longer digests leave less room for a false match.https://passwordhive.net/images/content/file-checksum-comparator/file-checksum-comparator-one-bit-change-heatmap.svgSHA-256 bit changes after a one-bit file editOne flipped bit in a 21,000-byte file changed 52.3% of the SHA-256 digest.https://passwordhive.net/hash-comparison-toolhttps://passwordhive.net/images/content/hash-comparison-tool/hash-comparison-tool-digest-character-differences.svgDigest character differences heatmapChanging one character of the input rewrote 57 of the 64 characters in the SHA-256 digest.https://passwordhive.net/images/content/hash-comparison-tool/hash-checker-digest-length-by-algorithm.svgDigest length by hash algorithmDigest length by algorithm: count the characters to tell which hash algorithm produced a string.https://passwordhive.net/images/content/hash-comparison-tool/hash-algorithm-timeline-md5-sha1-sha256-sha3.svgHash algorithm timelineFrom MD5 in 1992 to SHA-3 in 2015: which algorithms to trust for security checks.https://passwordhive.net/password-validation-regex-builderhttps://passwordhive.net/images/content/password-validation-regex-builder/password-validation-regex-pattern-anatomy.svgPassword regex pattern anatomyEach rule in the worked-example policy adds one fragment to the final password regex.https://passwordhive.net/images/content/password-validation-regex-builder/password-regex-test-results-heatmap.svgPassword regex test results gridEight test passwords against six rules: each invalid string fails exactly one.https://passwordhive.net/images/content/password-validation-regex-builder/password-length-combinations-chart.svgPassword length and possible combinationsPossible random passwords grow by about four powers of ten for every two extra characters.https://passwordhive.net/nist-800-63b-compliance-checkerhttps://passwordhive.net/password-policy-generatorhttps://passwordhive.net/images/content/password-policy-generator/password-policy-generator-strength-formula.svgPassword strength formulaThe strength formula applied to the staff rule: a 14-character password from a 94-character pool.https://passwordhive.net/images/content/password-policy-generator/password-strength-bits-by-length-and-character-pool.svgPassword strength by length and character poolStrength in bits by length and character pool, with the 14-character staff rule outlined.https://passwordhive.net/images/content/password-policy-generator/password-policy-old-rule-vs-new-tiers.svgOld password rule versus new tiered policyOld rule versus new tiered policy, in bits of strength.https://passwordhive.net/password-regex-testerhttps://passwordhive.net/images/content/password-regex-tester/password-regex-tester-rule-pass-fail-grid.svgPassword regex rule pass/fail gridRule-by-rule results for the six test inputs.https://passwordhive.net/images/content/password-regex-tester/password-regex-minimum-length-gap.svgPassword length versus 12-character minimumHow far each sample input sits from the 12-character minimum.https://passwordhive.net/pci-dss-password-compliance-checkerhttps://passwordhive.net/images/content/pci-dss-password-compliance-checker/pci-dss-password-change-frequency-timeline.svgPCI DSS password change frequency timelineThe merchant's 180-day change cycle lands twice as far out as the 90-day limit.https://passwordhive.net/images/content/pci-dss-password-compliance-checker/pci-dss-password-compliance-score-breakdown.svgPCI DSS password compliance score breakdownThree passing controls out of eight checked give a 37.5% score.https://passwordhive.net/images/content/pci-dss-password-compliance-checker/pci-dss-password-policy-gap-chart.svgPCI DSS password policy gap chartFive numeric settings in the worked example, each shown against its PCI DSS v4.0.1 minimum.https://passwordhive.net/django-secret-key-generatorhttps://passwordhive.net/images/content/django-secret-key-generator/django-secret-key-entropy-formula.svgDjango SECRET_KEY entropy formulaEntropy of Django's default key: 50 characters from a 50-symbol set gives 282.2 bits.https://passwordhive.net/images/content/django-secret-key-generator/django-secret-key-entropy-by-length-and-charset.svgEntropy by key length and character setEntropy in bits by key length and character-set size; the outlined cell is Django's default.https://passwordhive.net/images/content/django-secret-key-generator/django-secret-key-generation-methods-compared.svgSECRET_KEY generation methods comparedFive SECRET_KEY generation methods ranked by bits of entropy.https://passwordhive.net/uuid-generatorhttps://passwordhive.net/api-key-generatorhttps://passwordhive.net/jwt-secret-generatorhttps://passwordhive.net/images/content/jwt-secret-generator/jwt-secret-key-384-bit-bytes-to-characters.svg384-bit JWT secret key size breakdownA 384-bit secret is 48 random bytes; the alphabet you write it in decides how many characters you paste.https://passwordhive.net/images/content/jwt-secret-generator/jwt-secret-generator-hs256-vs-hs384-key-length.svgHS256 vs HS384 secret key length in charactersCharacters needed for an HS256 versus HS384 secret key in each encoding.https://passwordhive.net/images/content/jwt-secret-generator/jwt-secret-rotation-schedule-timeline.svgJWT secret rotation schedule timelinePublish on day 0, retire the old secret on day 7, rotate again on day 90.https://passwordhive.net/laravel-app-key-generatorhttps://passwordhive.net/random-token-generatorhttps://passwordhive.net/images/content/random-token-generator/token-entropy-formula-bits-per-character.svgToken entropy formula and bits per characterEach character adds log2(N) bits of entropy, so bigger alphabets give shorter tokens at the same bit length.https://passwordhive.net/images/content/random-token-generator/random-token-length-by-bit-length-and-encoding.svgToken length by bit length and encoding heatmapCharacters needed for each bit length and encoding; the worked 192-bit example is outlined.https://passwordhive.net/images/content/random-token-generator/token-entropy-bits-time-to-brute-force-timeline.svgTime to brute-force a token by bits of entropyAverage brute-force time at one trillion guesses per second: 128 bits is the practical production floor.https://passwordhive.net/rsa-key-pair-generatorhttps://passwordhive.net/rails-secret-key-base-generatorhttps://passwordhive.net/ssh-key-pair-generatorhttps://passwordhive.net/wifi-qr-code-generatorhttps://passwordhive.net/images/content/wifi-qr-code-generator/wifi-qr-code-payload-character-breakdown.svgWiFi QR code payload character breakdownThe Harbor Loft example string adds up to 52 characters, two of them escape backslashes.https://passwordhive.net/images/content/wifi-qr-code-generator/wifi-qr-code-sign-size-by-scan-distance.svgWiFi QR code sign size by scan distanceMinimum printed size grows with scan distance: divide the distance by 10.https://passwordhive.net/password-qr-code-generatorhttps://passwordhive.net/images/content/password-qr-code-generator/wifi-qr-code-payload-byte-breakdown.svgWiFi QR code payload byte breakdownThe stored text for the MapleLoft_Guest network is 49 bytes: 18 of framing, 15 for the SSID and 16 for the password.https://passwordhive.net/images/content/password-qr-code-generator/qr-code-error-correction-level-size-comparison.svgQR code error correction level versus sizeThe same 49-byte WiFi text needs a version 3 grid at level L but a version 6 grid at level H.https://passwordhive.net/text-encrypter-decrypterhttps://passwordhive.net/file-encrypter-decrypterhttps://passwordhive.net/images/content/file-encrypter-decrypter/file-encrypter-decrypter-key-stretching-guess-rate.svgFile encryption key stretching guess ratePBKDF2 key stretching cuts an attacker's guess rate from 10 billion to 16,667 per second.https://passwordhive.net/images/content/file-encrypter-decrypter/encrypted-file-password-strength-crack-time-heatmap.svgPassword crack time heatmap for an encrypted fileAverage time to find the password behind an encrypted file, with the 12-character letters-and-digits example outlined.https://passwordhive.net/pgp-key-pair-generatorhttps://passwordhive.net/shamir-secret-sharing-splitterhttps://passwordhive.net/images/content/shamir-secret-sharing-splitter/shamir-secret-sharing-splitter-recovery-waterfall.svgShamir secret recovery waterfallRecovering the secret 58 from shares 1, 3 and 5 of the worked 3-of-5 split.https://passwordhive.net/images/content/shamir-secret-sharing-splitter/shamir-secret-sharing-perfect-secrecy-bars.svgCandidate secrets left by number of sharesCandidate secrets left for an attacker holding 0, 1, 2 or 3 shares of the 3-of-5 example.https://passwordhive.net/images/content/shamir-secret-sharing-splitter/secret-sharing-threshold-spare-shares-grid.svgSpare shares by threshold and totalHow many shares you can lose for each threshold and total, with the 3-of-5 example outlined.https://passwordhive.net/bulk-password-generatorhttps://passwordhive.net/images/content/bulk-password-generator/bulk-password-generator-entropy-formula.svgBulk password entropy formulaEntropy grows with length and the size of the character pool.https://passwordhive.net/images/content/bulk-password-generator/bulk-password-generator-character-pool-waterfall.svgCharacter pool after excluding similar charactersExcluding similar characters trims the pool from 74 to 67.https://passwordhive.net/images/content/bulk-password-generator/bulk-password-generator-entropy-heatmap.svgPassword entropy by length and character poolLength adds more entropy than extra character groups.https://passwordhive.net/diceware-passphrase-generatorhttps://passwordhive.net/images/content/diceware-passphrase-generator/diceware-passphrase-entropy-formula.svgDiceware passphrase entropy formulaSix words from a 7,776-word list give 77.5 bits of entropy.https://passwordhive.net/images/content/diceware-passphrase-generator/diceware-passphrase-crack-time-heatmap.svgDiceware passphrase crack time heatmapAverage time to crack a Diceware passphrase, with the six-word, 25 billion guesses per second case outlined.https://passwordhive.net/images/content/diceware-passphrase-generator/eff-wordlist-bits-of-entropy-comparison.svgEFF wordlist entropy comparisonThe large list adds about 2.6 bits to every word compared with the short list.https://passwordhive.net/memorable-password-generatorhttps://passwordhive.net/images/content/memorable-password-generator/memorable-password-entropy-waterfall.svgMemorable password entropy waterfallHow four random words and a two-digit number add up to 58.3 bits of entropy in the lantern-quarry-velvet-mosaic-47 example.https://passwordhive.net/images/content/memorable-password-generator/memorable-password-crack-time-by-word-count.svgPassword entropy by word countEntropy and average crack time grow quickly with each extra word in a memorable password.https://passwordhive.net/pattern-based-password-generatorhttps://passwordhive.net/images/content/pattern-based-password-generator/pattern-based-password-generator-entropy-formula.svgPattern based password generator entropy formulaEntropy is the sum of the bits each random slot contributes; literal dashes contribute none.https://passwordhive.net/images/content/pattern-based-password-generator/random-password-generator-bits-by-character-type.svgBits of entropy by character typeWhere the 79.1 bits in the worked mask come from, by character type.https://passwordhive.net/images/content/pattern-based-password-generator/strong-password-generator-pattern-comparison.svgPassword pattern strength comparisonSlot count, not look-alike complexity, decides strength.https://passwordhive.net/pronounceable-password-generatorhttps://passwordhive.net/images/content/pronounceable-password-generator/pronounceable-password-entropy-bits-breakdown.svgPronounceable password entropy breakdownHow the worked example reaches 57.5 bits of estimated entropy.https://passwordhive.net/images/content/pronounceable-password-generator/pronounceable-password-crack-time-timeline.svgPronounceable password crack time by entropyAverage crack time at a trillion guesses per second, placed by bits of entropy.https://passwordhive.net/images/content/pronounceable-password-generator/pronounceable-vs-random-password-length-bits.svgPronounceable versus random password bits by lengthPronounceable strings carry about half the bits of random ones at the same length.https://passwordhive.net/recovery-backup-codes-generatorhttps://passwordhive.net/images/content/recovery-backup-codes-generator/backup-code-entropy-build-up.svgBackup code entropy build-upEach character from a 32-symbol alphabet adds 5 bits, reaching 50 bits at ten characters.https://passwordhive.net/images/content/recovery-backup-codes-generator/recovery-backup-codes-guess-odds-by-length.svgGuess odds by entry length and alphabet sizeLonger entries and larger alphabets push the odds of a lucky guess out of reach.https://passwordhive.net/temporary-password-generatorhttps://passwordhive.net/images/content/temporary-password-generator/temporary-password-entropy-by-length-and-pool-size.svgPassword entropy by length and pool sizeEntropy grows with both length and pool size; the outlined cell is the 14-character onboarding example.https://passwordhive.net/images/content/temporary-password-generator/temporary-password-expiry-timeline.svgTemporary password lifecycle timelineA temporary password's life ends at the first sign-in or at hour 72, whichever comes first.https://passwordhive.net/unambiguous-password-generatorhttps://passwordhive.net/images/content/unambiguous-password-generator/unambiguous-password-generator-entropy-cost.svgEntropy cost of excluding ambiguous charactersExcluding five look-alike characters costs 2.0 bits of password entropy, and one extra character more than recovers it.https://passwordhive.net/images/content/unambiguous-password-generator/random-password-entropy-by-length-and-pool.svgPassword entropy by length and character poolPassword length changes entropy far more than the choice between a 57-character and a 62-character pool.https://passwordhive.net/xkcd-style-password-generatorhttps://passwordhive.net/images/content/xkcd-style-password-generator/xkcd-style-password-entropy-formula.svgXKCD-style password entropy formulaSix words from a 7,776-word list build up to 77.5 bits of passphrase entropy.https://passwordhive.net/images/content/xkcd-style-password-generator/passphrase-cracking-time-by-word-count.svgPassphrase cracking time by word countAverage cracking time at ten billion guesses per second for three to seven random words.https://passwordhive.net/images/content/xkcd-style-password-generator/xkcd-password-word-list-size-entropy-grid.svgEntropy by word count and word list sizeBits of entropy by number of words and word list size; the outlined cell is the six-word example.https://passwordhive.net/easy-to-type-password-generatorhttps://passwordhive.net/images/content/easy-to-type-password-generator/easy-to-type-password-entropy-formula.svgEasy-to-type password entropy formulaEntropy for a 14-character password from the 31-character easy-key pool.https://passwordhive.net/images/content/easy-to-type-password-generator/password-entropy-by-length-and-character-pool.svgPassword entropy by length and character poolEntropy in bits by character pool and password length.https://passwordhive.net/images/content/easy-to-type-password-generator/easy-to-type-password-strength-comparison.svgEasy-to-type password strength comparisonEntropy and Shift presses for five password styles.https://passwordhive.net/multilingual-passphrase-generatorhttps://passwordhive.net/images/content/multilingual-passphrase-generator/multilingual-passphrase-generator-entropy-by-word-count.svgPassphrase entropy by word count and wordlist poolEntropy rises with both word count and the number of combined wordlists.https://passwordhive.net/images/content/multilingual-passphrase-generator/passphrase-entropy-waterfall-multi-language-pool.svgHow a five-word multi language passphrase reaches 74.6 bitsHow a five-word multi language passphrase builds up to 74.6 bits of entropy.https://passwordhive.net/images/content/multilingual-passphrase-generator/passphrase-crack-time-timeline.svgPassphrase crack-time timeline by entropyAverage offline crack times for passphrases of rising entropy at one trillion guesses per second.https://passwordhive.net/password-hint-phrase-generatorhttps://passwordhive.net/images/content/password-hint-phrase-generator/password-strength-formula-six-word-passphrase.svgPassphrase strength formulaThe entropy and crack-time formulas worked through for a six-word passphrase.https://passwordhive.net/images/content/password-hint-phrase-generator/random-password-vs-passphrase-strength-comparison.svgPassword versus passphrase strengthA six-word passphrase lands level with a 12-character random password.https://passwordhive.net/images/content/password-hint-phrase-generator/passphrase-entropy-by-word-count-heatmap.svgPassphrase entropy heatmapEach added word is worth about 13 bits, far more than a larger word list.https://passwordhive.net/brute-force-cost-calculatorhttps://passwordhive.net/images/content/brute-force-cost-calculator/brute-force-cost-calculator-formula-breakdown.svgBrute force cost formula worked exampleThe brute force cost formula applied to the worked example: keyspace, divided by attacker rate, times the rig's hourly price.https://passwordhive.net/images/content/brute-force-cost-calculator/brute-force-cost-by-length-and-hash-heatmap.svgBrute-force cost by password length and hashRental cost of a full sweep by password length and hash function; the outlined cell is the worked example.https://passwordhive.net/images/content/brute-force-cost-calculator/password-length-time-to-crack-timeline.svgTime to crack by password lengthEach extra random character multiplies the MD5 sweep time by 62.https://passwordhive.net/bulk-password-strength-auditorhttps://passwordhive.net/images/content/bulk-password-strength-auditor/password-strength-bits-by-length-and-character-pool.svgPassword strength bits by length and character poolRaw bits by length and character pool: length adds more strength than a larger symbol set.https://passwordhive.net/images/content/bulk-password-strength-auditor/bulk-password-strength-auditor-raw-vs-adjusted-bits.svgRaw vs adjusted password strength in bitsEight sample passwords: raw bits average 88.7, adjusted bits average 40.1.https://passwordhive.net/common-password-blacklist-checkerhttps://passwordhive.net/images/content/common-password-blacklist-checker/common-password-blacklist-bloom-filter-formula.svgBloom filter size formula for a password blacklistThe bloom filter formula applied to a 250,000-entry password blacklist.https://passwordhive.net/images/content/common-password-blacklist-checker/password-list-bloom-filter-size-heatmap.svgBloom filter size by password list size and false-positive rateFilter size grows with list size and tighter accuracy; the 250,000-password example is outlined.https://passwordhive.net/password-reuse-checkerhttps://passwordhive.net/images/content/password-reuse-checker/sha-1-k-anonymity-password-check-prefix.svgSHA-1 k-anonymity prefix lookupOnly the first 5 of 40 hash characters are sent in a k-anonymity lookup.https://passwordhive.net/images/content/password-reuse-checker/password-reuse-rate-14-account-example.svgPassword reuse rate for 14 accountsWorked example: 11 of 14 accounts share a password, a 78.6% reuse rate.https://passwordhive.net/images/content/password-reuse-checker/leaked-password-accounts-at-risk-waterfall.svgAccounts at risk from leaked passwordsOnly the three accounts with their own passwords survive every shared-password leak.https://passwordhive.net/character-pool-size-calculatorhttps://passwordhive.net/images/content/character-pool-size-calculator/character-pool-size-breakdown-waterfall.svgCharacter pool size build-upEach group of characters you allow adds its own count to the pool: 26 + 26 + 10 + 32 = 94.https://passwordhive.net/images/content/character-pool-size-calculator/password-entropy-by-pool-size-and-length-heatmap.svgPassword entropy by pool and lengthEntropy in bits across pool and length; the outlined cell is the 14-character lowercase password at 65.8 bits.https://passwordhive.net/images/content/character-pool-size-calculator/pool-size-versus-password-length-entropy-gain.svgPool size versus length entropy gainFour extra lowercase characters add more bits than widening the pool to 62 characters.https://passwordhive.net/keyboard-walk-detectorhttps://passwordhive.net/images/content/keyboard-walk-detector/keyboard-walk-detector-key-map-example.svgKeyboard map showing two walks in a passwordWhere the detector finds the two walks in Bluefin#mnbvc9876: 9 of 17 characters, or 52.9%, follow neighbouring keys.https://passwordhive.net/images/content/keyboard-walk-detector/keyboard-walk-detector-entropy-waterfall.svgEntropy waterfall for a password with two keyboard walksCounting each walk as one token removes 42.5 bits from the random-looking 111.7-bit estimate.https://passwordhive.net/leetspeak-substitution-detectorhttps://passwordhive.net/images/content/leetspeak-substitution-detector/leetspeak-substitution-density-zones.svgLeetspeak substitution density zonesFour of the 12 characters in Gr33nT34pot! are swapped, a 33.3% substitution density.https://passwordhive.net/images/content/leetspeak-substitution-detector/leetspeak-password-strength-waterfall.svgLeet password strength waterfallLeet swaps add only 5.0 of the password's 38.9 bits.https://passwordhive.net/images/content/leetspeak-substitution-detector/leet-swaps-vs-extra-words-password-bits.svgLeet swaps versus extra wordsOne extra word adds about 14.3 bits; five leet swaps add 5.https://passwordhive.net/password-expiry-date-calculatorhttps://passwordhive.net/images/content/password-expiry-date-calculator/password-shelf-life-remaining-percentage.svgPassword shelf life remainingShelf life remaining for the 75-day example: 21 days left is 28 percent.https://passwordhive.net/images/content/password-expiry-date-calculator/password-expiry-date-timeline-75-day-policy.svgPassword expiry date timelineKey dates for a password set on 14 February 2026 with a 75-day policy.https://passwordhive.net/images/content/password-expiry-date-calculator/password-expiration-date-by-policy-length-grid.svgPassword expiration date gridExpiry dates for three set dates and four policy lengths; the outlined cell is the worked example.https://passwordhive.net/password-similarity-comparatorhttps://passwordhive.net/quantum-resistance-estimatorhttps://passwordhive.net/images/content/quantum-resistance-estimator/quantum-resistance-estimator-margin-waterfall.svgQuantum resistance margin waterfallWorked example: 16.5 years needed against 14 years available leaves a margin of -2.5 years.https://passwordhive.net/images/content/quantum-resistance-estimator/quantum-risk-calculator-margin-heatmap.svgQuantum risk margin heatmapMargin in years for 12 years of data longevity across migration times and Q-Day guesses.https://passwordhive.net/images/content/quantum-resistance-estimator/post-quantum-security-bits-before-after.svgSecurity bits before and after a quantum attackQuantum attacks erase RSA and ECC security and halve the bits of symmetric keys and hashes.https://passwordhive.net/argon2-hash-generatorhttps://passwordhive.net/htpasswd-file-generatorhttps://passwordhive.net/images/content/htpasswd-file-generator/htpasswd-file-generator-bcrypt-entry-anatomy.svgBcrypt htpasswd entry anatomyHow the example bcrypt line for dana.reyes adds up to 71 characters.https://passwordhive.net/images/content/htpasswd-file-generator/bcrypt-cost-factor-hash-time.svgBcrypt cost factor and hash timeMeasured hashing time for the example password at five bcrypt cost values.https://passwordhive.net/md5-hash-generatorhttps://passwordhive.net/ntlm-hash-generatorhttps://passwordhive.net/sha256-hash-generatorhttps://passwordhive.net/images/content/sha256-hash-generator/sha256-hash-generator-output-length.svgSHA-256 hash output lengthAny input becomes a 256-bit digest written as 64 hex characters.https://passwordhive.net/images/content/sha256-hash-generator/sha256-avalanche-effect-bit-flips.svgSHA-256 avalanche effect heatmapChanging one character flips 121 of 256 bits, the avalanche effect.https://passwordhive.net/images/content/sha256-hash-generator/hash-algorithm-digest-size-comparison.svgHash algorithm digest sizesDigest size in bits for common hash algorithms, with SHA-256 highlighted.https://passwordhive.net/django-password-hash-generatorhttps://passwordhive.net/hmac-generatorhttps://passwordhive.net/images/content/hmac-generator/hmac-generator-two-pass-formula.svgHMAC two-pass formulaAn HMAC hashes your message twice, mixing the secret key into both passes.https://passwordhive.net/images/content/hmac-generator/hmac-output-length-hex-vs-base64.svgHMAC output length, hex vs Base64Base64 output runs about a third shorter than hex for every hash width.https://passwordhive.net/images/content/hmac-generator/hmac-signature-verification-mismatch.svgHMAC verification match and mismatchChanging the amount from 2749 to 2750 produces a completely different HMAC-SHA256 code, so the receiver rejects it.https://passwordhive.net/mysql-password-hash-generatorhttps://passwordhive.net/images/content/mysql-password-hash-generator/mysql-password-hash-generator-worked-example.svgMySQL password hash worked exampleThe worked example from password to the stored 41-character value.https://passwordhive.net/images/content/mysql-password-hash-generator/mysql-password-hash-format-timeline.svgMySQL password hash format timelineHow MySQL password hashing changed from the pre-4.1 format to MySQL 9.0.https://passwordhive.net/pbkdf2-hash-generatorhttps://passwordhive.net/images/content/pbkdf2-hash-generator/pbkdf2-hash-generator-formula-breakdown.svgPBKDF2 formula with the worked-example inputsThe five inputs behind the worked example: hash function, password, salt, iteration count and key length.https://passwordhive.net/images/content/pbkdf2-hash-generator/pbkdf2-derived-key-hex-vs-base64-length.svgHex versus Base64 length for derived keysThe same derived key is shorter in Base64 than in hex.https://passwordhive.net/images/content/pbkdf2-hash-generator/pbkdf2-hash-time-by-algorithm-and-iterations.svgPBKDF2 hash time heatmapMeasured hash time by algorithm and iteration count; the outlined cell is the 600,000-iteration SHA-256 worked example.https://passwordhive.net/postgres-md5-password-hash-generatorhttps://passwordhive.net/images/content/postgres-md5-password-hash-generator/postgres-md5-password-hash-anatomy.svgPostgres md5 password hash anatomyThe stored value for reporting_svc: the md5 prefix plus the 128-bit MD5 digest of password and username.https://passwordhive.net/images/content/postgres-md5-password-hash-generator/postgresql-md5-to-scram-sha-256-version-timeline.svgPostgreSQL md5 to SCRAM-SHA-256 timelinePostgreSQL password encryption milestones by server version.https://passwordhive.net/sha1-hash-generatorhttps://passwordhive.net/images/content/sha1-hash-generator/sha1-digest-size-vs-md5-sha256-sha512.svgHash digest size comparisonA SHA-1 digest is 160 bits, which is always 40 hex characters.https://passwordhive.net/images/content/sha1-hash-generator/sha1-collision-resistance-formula.svgSHA-1 collision bound formulaThe birthday bound puts SHA-1 collision effort at about 2^80 operations.https://passwordhive.net/images/content/sha1-hash-generator/sha1-hash-algorithm-timeline.svgSHA-1 timeline from 1995 to 2017SHA-1 went from a published standard to a legacy algorithm between 1995 and 2017.https://passwordhive.net/sha512-hash-generatorhttps://passwordhive.net/images/content/sha512-hash-generator/sha512-hash-generator-hex-length-formula.svgSHA-512 hex length formula and comparisonA 512-bit SHA-512 digest always prints as 128 hexadecimal characters.https://passwordhive.net/images/content/sha512-hash-generator/sha512-digest-avalanche-bits-changed.svgSHA-512 avalanche effect bit chartEach small edit to hive-backup-2026-10-05 changes roughly half of the 512 digest bits.https://passwordhive.net/images/content/sha512-hash-generator/sha512-hexadecimal-vs-base64-length.svgSHA-512 hexadecimal vs Base64 lengthBase64 writes the same digest in fewer characters than hexadecimal.https://passwordhive.net/drupal-password-hash-generatorhttps://passwordhive.net/images/content/drupal-password-hash-generator/drupal-password-hash-sha512-rounds-formula.svgDrupal $S$ hash formula and length comparisonThe iterated SHA-512 formula and how the stored hash length compares with bcrypt and WordPress.https://passwordhive.net/images/content/drupal-password-hash-generator/drupal-password-hash-anatomy.svgDrupal $S$ password hash anatomyThe four parts of the example Drupal password hash: marker and cost, salt, and truncated SHA-512 digest.https://passwordhive.net/images/content/drupal-password-hash-generator/drupal-password-hash-storage-by-version.svgDrupal password hash storage by versionWhich table and hash format each Drupal version uses.https://passwordhive.net/joomla-password-hash-generatorhttps://passwordhive.net/images/content/joomla-password-hash-generator/joomla-password-hash-anatomy.svgAnatomy of a Joomla bcrypt password hashWhere each part of the 60-character example string sits.https://passwordhive.net/images/content/joomla-password-hash-generator/joomla-password-hash-format-by-version.svgJoomla password hash format by releaseWhich stored format each release expects.https://passwordhive.net/sha3-hash-generatorhttps://passwordhive.net/images/content/sha3-hash-generator/sha3-hash-generator-sponge-construction-flow.svgSHA-3 sponge construction flowThe sponge construction behind SHA-3: pad, absorb, permute, squeeze.https://passwordhive.net/images/content/sha3-hash-generator/sha3-256-avalanche-effect-bit-comparison.svgSHA3-256 avalanche effectOne changed character flips 133 of 256 bits, close to the ideal 50 percent.https://passwordhive.net/images/content/sha3-hash-generator/sha3-hash-size-security-strength-comparison.svgSHA-3 security strength by hash sizeCollision and preimage strength in bits for each SHA-3 size.https://passwordhive.net/scrypt-hash-generatorhttps://passwordhive.net/abouthttps://passwordhive.net/contacthttps://passwordhive.net/sitemaphttps://passwordhive.net/privacy-policyhttps://passwordhive.net/termshttps://passwordhive.net/vinitha-pu