🛡️ Password Strength Checker
Quick answer
Password strength is mostly about length and unpredictability: a random 14-character password has roughly 90 bits of entropy and would take billions of years to brute-force, while common choices like "qwerty" or "password123" fall in under a second because attackers try leaked password lists first. This checker estimates entropy from the character pool, then reduces the score for common words, sequences and repeats.
🔒 Checked locally in your browser — your password is never sent anywhere.
Start typing above to see length, entropy and crack-time estimates.
✅ 100% free · 🔒 Runs in your browser — files never leave your device · 🚫 No sign-up
How to use the Password Strength Checker
- Type or paste the password you want to test (nothing leaves your device).
- Read the verdict, entropy and the two crack-time estimates.
- Work through the checklist — length first, then character variety.
- For a real account, generate a fresh random password instead of tweaking an old one.
Frequently asked questions
Is it safe to type my real password here?
Yes — the check runs entirely in your browser with no network calls, and the password is never stored or transmitted. For extra caution you can test a similar password with the same structure instead.
Why is my long password still rated weak?
Length only helps if it is unpredictable. Repeats ("aaaaaa"), sequences ("123456", "qwerty") and dictionary words are tried early by cracking tools, so they add far less strength than random characters.
What entropy should I aim for?
80 bits or more is strong for most accounts and 120+ bits is effectively future-proof. A random 16-character password using all character types reaches about 105 bits.