> English has ~1 bit of entropy per character. I think the discrepancy here is coming from the fact that you are assuming the password is using English words,

> English has ~1 bit of entropy per character. I think the discrepancy here is coming from the fact that you are assuming the password is using English words, where others are assuming completely randomly selected characters from the set /[a-zA-Z0-9]/, plus some special characters, which yields substantially more than 1 bit per character.