Password Combination
Calculate the number of possible password combinations based on character types and length. Free online password strength analyzer with interactive combination charts and crack time estimates.
About This Calculator
The Password Combination Calculator helps you determine the total number of possible password combinations given a specific character set and password length. This is essential for understanding password strength against brute-force attacks, where an attacker tries every possible combination until finding the correct one.
Password combinations follow the mathematical formula for permutations with repetition: C = n^k, where n is the number of allowed characters and k is the password length. Each position in the password can independently use any character from the selected set, making the total count grow exponentially with length. The calculator supports both unrestricted mode and the "require at least one from each type" mode, which uses the inclusion-exclusion principle to subtract passwords that don't meet minimum complexity requirements.
Regional Notes
India (IN): Indian banks and government portals like Aadhaar and DigiLocker typically require passwords with 8-15 characters, including uppercase, lowercase, numbers, and special characters. NPCI recommends minimum 12-character passwords for net banking.
United States (US): NIST SP 800-63B guidelines recommend passwords of at least 8 characters, with no arbitrary complexity rules. However, many US websites still enforce complexity requirements with uppercase, digit, and symbol mandates.
United Kingdom (UK): NCSC (National Cyber Security Centre) recommends using three random words rather than complex passwords with special characters, though many UK financial services still require mixed character types for online banking.
Frequently Asked Questions
How do you calculate password combinations?
Password combinations are calculated using permutations with repetition: total combinations = (character set size)^(password length). For example, a 8-character password using 26 lowercase letters has 26^8 = 208,827,064,576 possible combinations. When requiring at least one character from each selected type, inclusion-exclusion principle is used to subtract invalid combinations.
How many password combinations are possible with 8 characters?
With 8 lowercase letters: 26^8 ≈ 208 billion combinations. With lowercase + uppercase + digits + symbols (94 chars): 94^8 ≈ 6.1 quadrillion combinations. The actual number depends on which character types you include.
What is the formula for password permutations?
The formula for password permutations with repetition is n^k, where n is the number of allowed characters and k is the password length. This is because each position can be filled with any of the n characters independently.
How long does it take to crack a password by brute force?
A 12-character password with all character types takes billions of years to crack at 1 billion guesses per second. An 8-character lowercase-only password can be cracked in minutes. Modern cracking speeds range from billions to trillions of guesses per second using GPU clusters.
What character types make the strongest password?
Using all four character types — lowercase (26), uppercase (26), digits (10), and symbols (32) — gives 94 possible characters per position. Longer passwords with all types provide exponentially more combinations. A 16-character password using all 94 characters has 94^16 ≈ 3.7 × 10^31 combinations.
Does requiring at least one of each type reduce or increase security?
Requiring at least one character from each selected type slightly reduces the total combinations compared to unrestricted choice, but ensures the password meets complexity requirements. For a 94-character set at 8 characters, unrestricted gives 94^8, while requiring at least one from each type still yields approximately 94^8 − 90^8 − 90^8 − 84^8 − 62^8 + ... which is slightly lower but still astronomically large.
How does password length affect security?
Password length has an exponential effect on security. Adding one character multiplies the total combinations by the character set size. A 10-character password with 94 character types has 94^4 ≈ 78 million times more combinations than a 6-character password with the same types. Length is the most important factor in password strength.