What Does Case Sensitive Mean?

Definition of Case Sensitive, Case Sensitive Passwords, & More

Picture of a collection of antique wooden letters
Seite7 / E+ / Getty Images
Was this page helpful?

Anything that is case sensitive discriminates between uppercase and lowercase letters. In other words, it means that two words that appear or sound identical, but are using different letter cases, are not considered equal.

For example, if a password field is case sensitive, then you must enter each letter case as you did when the password was created. Any tool that supports text input might support case sensitive input.

Where is Case Sensitivity Used?

Examples of computer related data that is oftentimes, but not always, case sensitive include commands, usernames, file names, variables, and passwords.

For example, because Windows passwords are case sensitive, the password HappyApple$ is only valid if it's entered in that exact way. You can not use HAPPYAPPLE$ or even happyApple$, where just a single letter is in the wrong case. Since every letter can be uppercase or lowercase, each version of the password that uses either case is really an entirely different password.

Email passwords are often case sensitive too. So, if you're logging into something like your Google or Microsoft account, you must be sure to enter the password in exactly the same way you did when it was created.

Of course, these aren't the only areas where text can be distinguished by letter case. Some programs that offer a search utility, like the Notepad++ text editor and the Firefox web browser, have an option to run case sensitive searches so that only words of the proper case entered into the search box will be found.

Everything is a free search tool for your computer that supports case sensitive searches too.

When you're making a user account for the first time, or are logging into that account, you may find a note somewhere around the password field that explicitly says the password is case sensitive, in which case it does matter how you enter the letter cases to login.

However, if a command, program, website, etc. does not discriminate between uppercase and lowercase letters, it could be referred to as case insensitive or case independent, but will probably not even mention it if so.

Security Behind Case Sensitive Passwords

A password that must be entered with the proper letter cases is much more secure than one that doesn't, so most user accounts are case sensitive.

Using the example from above, you can see that even those two incorrect passwords alone provide three total passwords someone would have to guess to get access to the Windows account. And because that password has a special character and several letters, all of which could be uppercase or lowercase, finding the right combination wouldn't be quick or easy.

Imagine something simpler, though, like the password HOME. Someone would have to try all combinations of that password in order to land on the word with all the letters capitalized. They'd have to try HOMe, HOme, Home, home, hoMe, HoMe, hOme, etc. - you get the idea. If this password was case insensitive, though, every one of those attempts would work - plus, a simple dictionary attack would reach this password rather easily once the word home was tried.

With every additional letter added to a case sensitive password, the likelihood that it can be guessed within a reasonable amount of time is drastically reduced, and the security is amplified even more when special characters are included.