in reply to Password strength calculation

For measuring strength, I used entropy. For example,
#!/usr/bin/perl -l use strict; use warnings; use Data::Password::Entropy; use Data::Password::Manager qw(pw_gen pw_valid pw_obscure pw_clean pw_get); my $cleartext = 'Khen1950fx'; my $pass = pw_gen($cleartext); my $ok = pw_valid($cleartext, $pass); print "Valid" if $ok eq 1; print "Entropy is ", password_entropy($pass), " bits."; my $clean_text = pw_clean($ok);

Replies are listed 'Best First'.
Re^2: Password strength calculation
by Anonymous Monk on Jan 20, 2012 at 19:05 UTC

    Unfortunately, that particular password would be guessed correctly within the first 10 tries (right after 'password' and '12345'), regardless of how many bits of entropy you think it has.