How strong is your password?
Type a password to see its strength, estimated crack time and what's weakening it. Checked on your device — nothing is sent anywhere.
- Start typing to see feedback.
How it works
The checker estimates how many guesses an attacker would need. It starts from the length and the kinds of characters used, then applies penalties for patterns that cracking tools try early: common passwords, dictionary words, keyboard runs like qwerty, sequences like 1234, repeated characters and years.
The crack time assumes an offline attack at 10 billion guesses per second — roughly what a stolen, weakly hashed password database allows. It's an estimate for comparison, not a guarantee.
FAQ
Is it safe to type my real password here?
The check runs entirely in your browser with JavaScript; the password is never sent or stored. Still, the safest habit is to test a similar password rather than the exact one you use.
Why does my long password still score low?
Length only helps when it's unpredictable. Passwords built from common words, names, keyboard patterns or years are guessed early by cracking tools, so the checker reduces their score.
What makes a password strong?
Length and randomness. A random 16-character password, or a passphrase of five or more random words, is far beyond what brute-force attacks can reach. Use a different one for every account.