How is password strength scored?

The score is based on length (longer = stronger), character variety (uppercase, lowercase, numbers, symbols), absence of common patterns (keyboard walks like "qwerty", repeated characters), and not being a commonly used password.

What does the estimated crack time mean?

Estimated crack time is based on a brute-force attack at 10 billion guesses per second (approximate speed of modern GPU cracking hardware). This is a theoretical estimate, not a guarantee.

Is my password sent to a server?

No — password analysis runs entirely in your browser using JavaScript. Your password never leaves your device. There is no network request made.

What makes a password strong?

A strong password is at least 12 characters long, uses a mix of uppercase, lowercase, numbers, and symbols, avoids dictionary words and personal information, and is unique to each account.

Password Strength Checker

Analyse your password's strength with a detailed score, estimated crack time, checklist, and personalised improvement tips.

Your files never leave your device

Password

Your password never leaves your browser.

How to Password Strength Checker

Type or paste a password into the input field.
The strength score (0–10), label, and colour bar update instantly.
See the estimated crack time based on brute-force at 10 billion guesses per second.
Review the checklist to see which strength criteria your password passes or fails.
Follow the improvement tips to make your password stronger.

Why Use This Tool?

Most people do not know what makes a password truly strong. This tool gives you immediate, actionable feedback — not just a vague "medium" rating, but a specific checklist of what to fix, and an estimated crack time that puts the risk in concrete terms. Your password is never sent to a server.

Password Strength Checker

How to Password Strength Checker

Why Use This Tool?

Frequently Asked Questions