Machine Learning for Password Strength Classification Using Length and Entropy
Abstract
Password security is a critical cybersecurity challenge due to the prevalence of user-generated weak credentials, so automated evaluation methods are needed. This paper develops a Random Forest classification model to predict password strength based on two main features, namely password length and Shannon entropy, trained on a large-scale public dataset. The model achieved a classification accuracy of 91.5% on the test data, where feature importance analysis identified entropy as the most significant predictor. The resulting high-accuracy model is suitable for integration into real-time password strength feedback systems and provides a quantitative basis for formulating stronger security policies.
Copyright (c) 2023 Tanjung Arswendo Yudha, Muhamad Reyhan, Dianisa Mutmainnah, , Nashrul Hakiem

This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.
Authors who publish with this journal agree to the following terms:
- Authors retain copyright and grant the journal right of first publication with the work simultaneously licensed under a Creative Commons Attribution-ShareAlike 4.0 International License that allows others to share the work with an acknowledgment of the work's authorship and initial publication in this journal.
- Authors are able to enter into separate, additional contractual arrangements for the non-exclusive distribution of the journal's published version of the work (e.g., post it to an institutional repository or publish it in a book), with an acknowledgment of its initial publication in this journal.
- Authors are permitted and encouraged to post their work online (e.g., in institutional repositories or on their website) prior to and during the submission process, as it can lead to productive exchanges, as well as earlier and greater citation of published work (See The Effect of Open Access).

This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.



