Enter your password (analysis is instant & private)
Strength
—
Length
—
Entropy
—
Est. Crack Time
—
Analysis
Enter a password above to analyse it.
What This Tool Does
The Password Strength Checker analyses your password against multiple factors: length, character variety, common word patterns, keyboard sequences, and repeated characters. It calculates the password's entropy in bits and estimates the time it would take to crack using a high-speed offline attack (10 billion guesses/second).
Your password is analysed entirely in your browser. It is never sent to our servers.
Frequently Asked Questions
Is my password sent anywhere?
No. The strength analysis runs entirely in your browser using JavaScript. Your password never leaves your device — nothing is transmitted to our servers, logged, or stored.
How is the crack time estimated?
The estimate is based on the entropy of your password (calculated from its length and character set size) and assumes an offline attack rate of 10 billion guesses per second — a realistic figure for a determined attacker with dedicated hardware. Online attacks are much slower but the offline figure gives a conservative, honest estimate.
What makes a password truly strong?
Length matters most — each additional character multiplies the combinations exponentially. A 20-character passphrase of random words is stronger than a 10-character mix of symbols. Using all character types (upper, lower, numbers, symbols) also helps. Avoid dictionary words, names, dates, and keyboard patterns.
Why does my complex-looking password score poorly?
Common substitutions like @ for a, 3 for e, or ! at the end are well known to attackers and do not add as much security as they appear to. Truly random passwords of sufficient length are always stronger.
Should I use this to check my real passwords?
Since the check is client-side and nothing is transmitted, it is safe to use. That said, best practice is to use a password manager that evaluates passwords in its own secure environment.