117 · Security Tools

Password Strength Checker

Type a password to see an honest strength estimate with tips. The check runs entirely in your browser.

Checked on your device only. Nothing you type is sent or stored.

How to use the password strength checker

  1. Type or paste a password.
  2. Read the rating, estimated attack times and tips.
  3. Make it longer or less predictable until it rates strong.

How the estimate works

The checker starts from the length and the kinds of characters used, then subtracts for anything an attacker tries early: the most common passwords, dictionary words, swaps like @ for a, keyboard runs such as qwerty, repeated characters and years. Attack times assume an online attack limited to 100 guesses an hour, and an offline attack on a stolen, fast-hashed database at 10 billion guesses a second.

It’s an estimate, not a guarantee. A password that has appeared in a data breach is weak no matter how it scores.

Examples

P@ssw0rd

Very weak: a common password with letter swaps

correct horse battery staple

Very strong: a long passphrase

Questions

Is it safe to type my real password here?

The check runs only in your browser and nothing is sent or saved. Even so, a good habit is to test a password with a similar pattern rather than the real one.

What makes a strong password?

Length and unpredictability. Four or five random words, or 14+ random characters from a <a href="/tools/password-generator/">password generator</a>, kept in a password manager.