Overall score
0/4No password
0.0entropy bits10^0.0estimated guesses
Password Strength Checker
Test a password with realistic attacker-style checks: common words, keyboard patterns, repeats, dates, substitutions, length, entropy, and crack-time estimates. Analysis runs locally in your browser.
Strength analysis runs locally. Do not test active production passwords on shared or untrusted devices.
Optional: check exposure without sending the password itself.
Estimated Crack Time
Online throttled18 seconds
Online unthrottledinstantly
Offline slow hashinstantly
Offline fast hashinstantly
Detected Weaknesses
- Enter a candidate password to analyze it locally.
How To Improve It
- Use a long, unique passphrase or a password manager generated password.
Algorithm Advantage
Pattern basedFlags words, dates, sequences, keyboard walks, repeats, and l33t substitutions.
Guessability basedShows estimated guesses and crack times instead of a simple character checklist.
Privacy firstRuns locally and uses k-anonymity only when you request a breach lookup.
Best algorithm for this tool
The best design is a zxcvbn-style password estimator. Instead of only counting uppercase letters, numbers, and symbols, it searches for patterns attackers actually try: breached/common passwords, dictionary words, names, keyboard walks, dates, repeated characters, sequences, suffix numbers, and l33t substitutions.
This gives the tool a practical advantage: a long-looking password such as Password2026! is marked weak because it is predictable, while a longer unique passphrase can score well even without heavy symbol use.
Privacy-first design
The strength score is calculated in the browser and is not submitted to this website backend. The optional breach check uses a k-anonymity range lookup: the browser creates a SHA-1 hash locally and sends only the first five hash characters to the Pwned Passwords API.
Need a new password after checking one? Try the memorable password generator.