Password Strength Checker
Type a password to see how hard it would be to guess. Everything runs on your device; nothing is sent or stored.
How we estimate strength
We estimate the size of the character set you used (lowercase, uppercase, digits, symbols) and multiply by length to get entropy in bits, then subtract for patterns attackers try first: common passwords, keyboard runs like qwerty, repeated characters, years and simple number sequences.
The guessing time assumes a fast offline attack of 10 billion guesses per second against a leaked, weakly hashed database. Real sites using slow hashing are much harder to attack, but you cannot know how a site stores your password, so plan for the worst case.
The best defence is a long, unique password for every account, stored in a password manager, plus two-factor authentication or passkeys where offered.