What are long passwords with low entropy?

A long password can still be weak if it has low entropy, meaning it’s easy to guess even though it looks long.

Imagine you have a toy box with only two types of toys: red blocks and blue blocks. Even if you line up 10 blocks in a row, if they’re just red and blue, there are only a few possible combinations. That’s like a long password with low entropy, it has many characters, but not enough different choices to make it hard to guess.

Sometimes people use patterns or simple rules to make their passwords. For example, they might take a word and add numbers at the end, like “password1234”. Even though it’s long, most of the characters are predictable, it's like using only red and blue blocks again.

A strong password has more randomness, like mixing up different letters, numbers, and symbols in no clear pattern. It’s like having a toy box with dozens of different toys, you can make many more combinations, making the password harder to guess.