How is the strength estimated?

The tester estimates entropy from the character set used (lowercase, uppercase, digits, symbols) and the length, then derives an offline crack time assuming an attacker can make 10 billion guesses per second against a fast hash. It also flags very common passwords and trivial patterns.

What is a good password?

Aim for 60 bits of entropy or more — typically 12 or more characters mixing upper and lower case letters, numbers and symbols, with no dictionary words or repeats. A long random passphrase scores well.

Is my password sent anywhere?

No. The test runs entirely in your browser using JavaScript. Your password is never uploaded, stored, logged or transmitted — it never leaves your device.

Password Strength Tester

Check how strong a password really is — entropy, crack time and fixes.

Password strength tester

Type a password and instantly see how strong it really is: a strength rating, the entropy in bits, and an estimated offline crack time based on 10 billion guesses per second.

The tester also gives specific suggestions — add length, mix character types, avoid common passwords — so you know exactly how to make it stronger.

It is privacy-first: everything runs in your browser and your password never leaves your device.