Free Password Strength Checker
Check how strong a password is, with an estimated time to crack.
Checked locally in your browser. Never sent anywhere.
How to use this tool
Type a password into the box to see its strength rating, estimated entropy, and how long it would take to crack under a fast offline attack versus a rate-limited login form.
The checklist below shows which criteria your password meets: length, lowercase, uppercase, numbers, and symbols. Everything is calculated locally, nothing is sent to a server.
FAQ
- Is my password sent anywhere?
- No. The strength check runs entirely in your browser using JavaScript. Your password is never transmitted or stored.
- How is the crack time estimated?
- It's based on the password's entropy (character variety and length) and two guessing speeds: a fast offline attack (10 billion guesses per second) and a rate-limited online login form (10 guesses per second).
- Why is a long password still marked weak?
- If the password matches one of the most commonly used passwords, it's flagged as very weak regardless of length, since attackers try common passwords first.
- What makes a password strong?
- Length matters most, combined with a mix of lowercase, uppercase, numbers, and symbols. Avoid common words, patterns, and previously breached passwords.