Password strength checker
Estimates how long a password would survive a real attack. It looks for common passwords, names with numbers added, keyboard patterns, repeats and dates, not only length.
Nothing you type leaves this page
A strong-looking password can still be in a breach list. Check it with the Leaked password checker
How it works
Most strength meters only count length and character types, so “Password1!” looks strong. This checker works more like a real cracking tool: it looks for common passwords, dictionary words and names with numbers added, letter-for-symbol swaps (p@ssw0rd), keyboard patterns like qwerty, repeats and years, and only counts the rest as random.
It then estimates how long the password would last in three situations: guessing online against a site that limits attempts, and offline against a stolen password database that is stored well (bcrypt) or badly (a fast hash cracked on GPUs).
Questions people ask
Is it safe to type my real password here?
Yes. The check runs entirely in your browser and the page's security policy blocks it from sending anything. Still, the safest habit is to test a password that is similar to yours rather than the real one.
What makes a password strong?
Length and unpredictability. A passphrase of five or more random words, or 16 or more random characters from a password manager, beats a short password full of symbols.
Why does my password with symbols and numbers still score low?
Because attackers try common words with numbers and symbols added first. “Summer2024!” follows a pattern almost everyone uses, so it falls early.
More free tools
Found a bug or want another tool? Contact