How many possible combinations in 8 character password? I need to calculate the possible combinations for 8 characters password. The password must contain at least one of the following: (lower case letters, upper case letters, digits, punctuations, special characters).

Assume I have 95 ascii characters (lower case letters, upper case letters, digits, punctuations, special characters).


lower case letters = $26$
upper case letters = $26$
digits = $10$
punctuations &amp; special characters = $33$


The general formula for the possible passwords that I can from from these 95 characters is: $95^8$.

But, accurately, I feel the above formula is incorrect. Please, correct me.
The password policy requires at least one of the listed above ascii characters. Therefore, the password possible combinations = $(26)*(26)*(10)*(33)*(95)*(95)*(95)*(95)$

Which calculation is correct?

EDIT: Please, note that I mean 8 characters password and exactly 8. Also, There is no order specified (i.e. it could start with small letter, symbol, etc.). But it should contain at least one of the specified characters set (upper case, lower case, symbol, no., etc.).
Start with all $8$-character strings: $95^8$

Then remove all passwords with no lowercase ($69^8$), all passwords with no uppercase ($69^8$), all passwords with no digit ($85^8$) and all passwords with no special character ($62^8$).

But then you removed some passwords twice. You must add back all passwords with:


no lowercase AND no uppercase: $43^8$
no lowercase AND no digit: $59^8$
no lowercase AND no special: $36^8$
no uppercase AND no digit: $59^8$
no uppercase AND no special: $36^8$
no digit AND no special: $52^8$


But then you added back a few passwords too many times. For instance, an all-digit password was remove three times in the first step, then put back three times in the second step, so it must be removed again:


only lowercase: $26^8$
only uppercase: $26^8$
only digits: $10^8$
only special: $33^8$


Grand total: $95^8 - 69^8 - 69^8 - 85^8 - 62^8 + 43^8 + 59^8 + 36^8 + 59^8 + 36^8 + 52^8 - 26^8 - 26^8 - 10^8 - 33^8 = 3025989069143040 \approx 3.026\times10^{15}$
There's a simple flaw with the original equation:

It was stated that you have:


26 lowercase letters (a-z)
26 uppercase letters (A-Z)
10 digits (0-9)
33 punctuations and special characters





How many total choices can each character within the password use?

ADD the above numbers to answer that: $26+26+10+33 = 95$
How many characters is the password in question?

I believe we identified 8 in this scenario.
How many combinations for this password are there?

$$\text{(Possible choices)}^\text{(How many characters long)}=\text{(How many combinations)}$$

Or per this example, $96^8=6634204312890625$
Based on 8 characters of anything you can type, the answer is as simple as above.

As stated in a more convoluted, albeit more descriptively accurate, the number changes based on password requirements.
From a hacker / pentester perspective, entropy is stronger than mental complexity.

If people use all lowercase because rules don't force them to use something else, yes, their password is weaker being all lowercase, because I can probe the password based on just lowercase ($26^8$).

Wow, no rule against using humanly recognized words? (That was a common rule early-mid 2000s) The password rules themselves actually make a weaker password than the mathematically possible $96^8$.
Password entropy makes this even more fun as we demonstrate that the entropy of password


  A#1WepOjII95&amp;^2!


is actually weaker than the password


  OMGmathMakesMyHeadWant2EXPLODE

If you're looking at this from a security standpoint, use a long run-on phrase for a more challenging time being cracked. Using rainbow tables, it's now possible to crack a 64-character password within 4 minutes on a single computer.

No, your $120 Atom laptop isn't likely to meet that kind of hacking efficiency. It's simply saying you don't need a cluster of computers anymore.