Length is mathematically far more important than complexity. A 16-character phrase made of normal dictionary words is exponentially harder for a computer to crack than a short 8-character password packed with random symbols.
Entropy is a scientific measurement of how unpredictable your password is, calculated in "bits." Every time you add a character or expand the character pool (mixing lowercase, uppercase, numbers, and symbols), the search space multiplies. An entropy score above 60-70 bits is generally considered highly secure against modern hardware.
Online attacks happen when a bot tries guessing your password
directly on a website's login screen. These are slow because servers enforce
rate limits and lockouts.
Offline GPU attacks occur after a data breach. Attackers steal
password hashes from a company's database, then use powerful hardware to guess
huge numbers of combinations locally until they find a match.
Yes. This tool runs entirely locally using WebAssembly (WASM). Your keystrokes are processed by your browser and are never sent over the internet to any server. You could disconnect from Wi-Fi and it would still work.