Password Strength Meter
Check password entropy, estimated crack time and exactly what to fix — analysed locally, never sent to a server.
🔒 The password never leaves your device — analysis runs 100% in your browser. Never enter a real password you use on an important account into any website, including this one; test a similar pattern instead.
Frequently Asked Questions
How is password strength calculated?
The meter estimates entropy in bits from the password's length and character pool (lowercase, uppercase, digits, symbols), then subtracts penalties for dictionary words, sequences, keyboard walks, repeated characters and years. Crack times assume an attacker searches half the keyspace on average.
Should I type my real password here?
No tool — including this one — should ever receive a password you actually use. Test a similar pattern instead (same length and mix, different characters). This checker runs entirely in your browser and sends nothing to a server, but the habit matters.
What makes a password genuinely strong?
Length above all: a 16+ character passphrase of random words beats a short complex string. Uniqueness matters just as much — use a different password per site, stored in a password manager, with two-factor authentication on important accounts.
What is entropy in bits?
Each bit doubles the number of guesses an attacker needs. 40 bits can fall in hours to a fast offline attack; 80+ bits puts a password beyond practical brute force with current hardware.