Feature Request: Advanced/Configurable Password Entropy Calculator

[MooseExplorer637]

You should fix the way how you calculate passphrase entropy since the current model calculates it wrong and could make the user choose an extremely weak passphrase since even a two-word passphrase such as headrest-vagabond has a calculated entropy of 99.6 bits (calculated without Zxcvbn, which is a separate issue and I won't go into that here) which is highly incorrect. The correct number would be 25.8, which is nowhere near secure enough. You cannot calculate passphrase entropy in an identical way to password entropy, where the relevant information is the length and all the possible characters. Instead, the relevant information should be the wordlist and the number of words used. From other KeePass clients, at least KeePassXC has done this right.

So, here is an example of how to calculate this: 4-word passphrase using EFF Large wordlist containing 7776 words has an entropy of Log₂(7776⁴) = 51.7 bits.