...
Password strength for a randomly generated password is a function of the the size of the character space c and the number of required characters used for that password. To illustrate this KeeyPass was used to randomly generate the following passwords (using only a-z, A-Z, 0–9) . Each password was then tested against: zxcvbn demo to calculate how long a brute force attack would take for each. The demo gives an estimate for unthrottled online attacks which assumes an attacker can make 10 attempts per second. The demo also estimates for throttled online attacks that limit the number of attempts an attacker can make to 100 per minute.
...