Password Strength Checker
How strong is your password, really? Find out — locally and honestly.
Estimated crack time: instant
- At least 12 characters
- Uppercase and lowercase letters
- Contains a number
- Contains a symbol
- No obvious patterns (repeats, sequences, common words, years)
Checked locally in your browser only — the password you type is never sent anywhere or stored.
Honest tip: avoid typing a real password you currently use into any website tool, including this one. Test a similar made-up password instead.
Many passwords that look complex are surprisingly weak: short length, predictable patterns and reused words undo them. This checker estimates your password's entropy — its true unpredictability — from its length and character variety, and shows how long a fast offline attack would take to crack it.
It also flags the patterns attackers try first: sequences like 1234 and qwerty, repeated characters, common words and years. Everything runs locally in your browser; your password is never transmitted or stored.
How to check a password
- 1
Type or paste a password
For safety, test a password similar to yours rather than one you currently use — the score will be representative.
- 2
Read the entropy and crack time
Entropy above 60 bits is strong; above 80 is excellent. Crack time assumes 10 billion guesses per second.
- 3
Fix what the checklist flags
Length first — every extra character multiplies the work an attacker must do. Then add variety and remove patterns.
- 4
Better: generate a random one
Humans are pattern machines. Use the Dusrel Password Generator for passwords that are random by construction.
Frequently asked questions
Is it safe to type my password into a checker?
This one runs 100% locally — the password never leaves your device, and nothing is logged. Still, as a habit, test a similar throwaway password rather than a live one, on any website including ours.
How is the crack time calculated?
From entropy: a password with N bits of entropy needs on average 2^(N−1) guesses. We divide by 10 billion guesses per second — a fast offline attack on a leaked hash. Real-world times vary with the hash algorithm.
What entropy score should I aim for?
At least 60 bits for everyday accounts and 80+ bits for email, banking and other important accounts. A random 16-character password clears 100 bits.
Does a strong score guarantee my account is safe?
No. Strength only covers guessing. Reusing the same strong password across sites, or falling for phishing, defeats it — use unique passwords and a password manager.
More free tools
Password Generator
Strong, random passwords generated locally in your browser — nothing is ever sent to a server.
Username Generator
Catchy username ideas for social media, gaming and more — pick a style and click to copy.
Word Counter
Count words, characters, sentences and reading time — live, as you type or paste.
QR Code Generator
Turn any link or text into a QR code and download it as a PNG — free, no watermark.
Age Calculator
Your exact age in years, months and days — plus total days and your next birthday.