Password Strength Checker

Type or paste it above and the checker scores it instantly. Strength comes down to length and unpredictability: a strong password is long (12+ characters, ideally 16+), mixes uppercase, lowercase, numbers, and symbols, and isn't a common word or pattern. The tool shows an estimated crack time plus specific tips to improve it.

It estimates entropy from the password's length and the size of the character set it uses, then works out how long a fast offline attack — around 10 billion guesses per second — would take on average. It's a rough guide: a password built from a common word or predictable pattern is far weaker than its raw length suggests, so treat the estimate as an upper bound.

Yes — the check runs entirely in your browser using JavaScript. Your password is never sent over the network, uploaded, or stored anywhere. Even so, as a habit it's best to test example passwords rather than ones already protecting your accounts.

Length matters most — each extra character multiplies the guesses an attacker needs. Aim for 16+ characters, avoid dictionary words, names, and keyboard patterns like 'qwerty', and use a unique password for every account. A password manager makes long, random, unique passwords practical.