Type a password. See how it holds up.
Your password is analyzed locally using your browser's JavaScript engine — it never leaves your device. Get entropy, crack-time estimates, character breakdown, pattern detection, and clear improvement tips.
Nothing is uploaded. Close or refresh the page and it's gone.
We'll flag if any of these appear in your password (common in targeted attacks).
Four steps to a stronger password.
No manual required — here's the entire flow.
Type or paste
Enter the password you want to test. Use the eye icon to show or hide it while you type — nothing is sent anywhere.
Set checks
Leave the defaults for a quick check, or turn on personal word detection and policy rules in advanced options.
Analyze
Tap Analyze Password. You'll get entropy, estimated crack time, a character breakdown, and a clear strength label.
Improve
Read the suggestions, tweak your password, and re-analyze until you're happy. Copy or download the full report if you like.
Real analysis, not just a colored bar.
The details that make a strength checker actually useful — all running locally in your browser.
Runs on your device
Your password is analyzed locally using JavaScript. Nothing is logged, saved, or sent anywhere — ever.
Entropy & crack time
See the math behind your password's strength — how many possible combinations it has and how long a fast attack would take.
Pattern detection
We flag dictionary words, keyboard patterns like qwerty, sequences like 123 or abc, and repeated characters that weaken a password.
Questions people actually ask.
The short answers — with the long ones one tap away.
How does this password strength checker work?+
Type or paste a password into the field, and the tool analyzes it locally in your browser. It calculates entropy based on length and character variety, estimates how long a fast offline attack would take to crack it, checks for common patterns, and gives you a clear strength rating with improvement tips.
Is my password sent to a server?+
No. Everything runs entirely in your browser using JavaScript. Your password is never uploaded, logged, or stored anywhere. Closing or refreshing the page clears it completely.
What does entropy mean for a password?+
Entropy measures how unpredictable a password is, expressed in bits. It combines how long the password is with how many different character types it uses. More bits means more possible combinations and more guesses needed to crack it.
What is estimated crack time?+
Estimated crack time converts entropy into a rough duration, assuming an attacker can make about 10 billion guesses per second (a fast offline attack). It's a simplified but useful way to compare password strength at a glance.
What makes a password strong?+
Length is the biggest factor, followed by variety. A strong password is at least 12–16 characters long and mixes uppercase letters, lowercase letters, numbers, and symbols. Avoiding common words, patterns, and personal information also matters a great deal.
Should I use a password manager?+
Yes, strongly recommended. A password manager lets you use long, unique, random passwords for every site without having to memorize them. You only need to remember one strong master password.
Does this tool store or remember any password I type?+
No. Nothing is saved, logged, or synced anywhere. Once you leave or refresh the page, everything is gone. You can safely test any password here.
Is this password strength checker free?+
Yes, it's completely free with no account, no sign-up, and no limit on how many passwords you check.