Do you upload or store my password?

No. All checks run locally in your browser. We don’t send, log, or store any passwords or inputs.

What does entropy mean?

Entropy (in bits) estimates how unpredictable a password is. Higher entropy generally means a stronger password that is harder to brute-force.

How can I create a strong password?

Use a long passphrase (12–16+ chars) with mixed character sets, avoid common words/patterns, and don’t reuse passwords. A password manager helps generate and store unique passwords.

Tools Cube

Password Strength

Check password entropy, estimated crack times, and get actionable hints to harden your password.

Enter Password

Your password is processed locally in the browser — never sent anywhere.

Password

Very Weak

0.0 bits

0140+ bits

Entropy is estimated as length × log₂(charset).

Show details

Estimated Crack Times

How long a brute-force/dictionary attack could take, under different assumptions.

Online (10/sec)

0.1 sec

Online Fast (100/sec)

0.0 sec

Offline (slow hash ~100k/sec)

0.0 sec

Offline (fast hash ~10B/sec)

0.0 sec

Nation-state (1T/sec)

0.0 sec

Reality varies with attacker hardware, hashing algorithm, rate limits, 2FA, and whether the password appears in breach dumps.

Hints & Findings

Suggestions update as you type.

7 hints

Start typing above to see tailored hints.

Best practices

Use 14–20+ characters; passphrases are great (four+ random words).
Mix lower/upper, digits, and symbols — but avoid predictable substitutions (e.g., a→@).
Avoid dictionary words, names, dates, keyboard patterns, or company/product names.
Never reuse passwords; enable 2FA wherever possible.
Prefer a password manager to generate & store unique passwords.

Batch Test (Optional)

One candidate per line — we’ll score them quickly (no data leaves your browser).

Add lines above to see results.