Check how strong your password really is β€” entropy, estimated crack time, pattern detection, and improvement suggestions. All analysis runs locally in your browser; nothing is ever transmitted.

Enter Password

⚠ This is one of the most commonly used passwords β€” avoid it!

🔒 All analysis is done locally. Your password never leaves your device.

β€”

Analysis

Length
β€”
Charset Size
β€”
Entropy
β€”
Crack Time (10B/s)
β€”

Checks

    Suggestions

      How It Works

      All analysis runs entirely in your browser using plain JavaScript β€” no data is ever sent to a server.

      Entropy (measured in bits) quantifies how unpredictable a password is. The formula is length Γ— logβ‚‚(charset size). A 20-character password using all four character types (upper, lower, digit, symbol) produces roughly 131 bits of entropy β€” effectively uncrackable by brute force with current hardware.

      Crack Time is estimated at 10 billion guesses per second, representing a well-resourced offline attack. Online attacks are far slower due to rate limiting.

      Strength Levels

      LevelEntropyTypical Scenario
      Very Weak< 28 bitsShort or common password
      Weak28–39 bitsDictionary word + small variation
      Fair40–59 bitsMixed types, moderate length
      Strong60–79 bitsLong mixed-type password
      Very Strong80+ bitsFull character set, 16+ characters

      Tips

      • Use 16+ characters for everyday accounts; 24+ for critical ones.
      • Enable all character types to maximise entropy.
      • Avoid real words, names, dates, and keyboard patterns.
      • Use a password manager β€” never reuse passwords across sites.
      • Consider a passphrase (e.g. correct-horse-battery-staple) for passwords you must memorise.

      Generate a new password β†’ Password Generator

      Create and verify hashes β†’ Hash Generator