๐Ÿ”‘ Password Strength Checker

Your password is never sent anywhere โ€” it is only evaluated locally in your browser.

Check how strong a password is based on its estimated entropy (how hard it is to guess) and an estimated brute-force crack time. Useful for confirming a new password is strong enough on the spot. Everything is processed only in your browser.

How to use

  1. Type the password you want to check into the input box.
  2. The entropy, estimated crack time, and strength level (Very Weak to Strong) update in real time.
  3. If the strength isn't high enough, add more character types or length and check again.

FAQ

Is my password sent to a server?

No. All calculations happen entirely in your browser, and the password is never sent anywhere.

How is the "crack time" estimated?

It's based on the theoretical number of possible combinations given the password's character types (uppercase, lowercase, numbers, symbols) and length, assuming a brute-force attack. Actual attack methods can vary the real-world time.

Is it safe to type in a password I actually use?

Nothing leaves your browser, but as a precaution it's still a good habit to test with a placeholder string of the same length and character mix rather than a real password.

How do I make a stronger password?

Generally, combining uppercase, lowercase, numbers, and symbols, and using enough length (12+ characters is a common guideline), raises entropy and dramatically increases the estimated crack time.

Does it check resistance to dictionary attacks?

This tool estimates theoretical brute-force time based on character types and length โ€” it doesn't evaluate resistance to dictionary attacks using real words or common patterns. Avoid predictable words regardless of the score shown here.