Password Strength Checker

Estimate a password's strength and entropy — entirely offline.

Runs locally in your browser
Assessment No signup · offline analysis

Type a password to check its strength

You'll see a strength rating, an entropy estimate, an approximate crack time, and specific tips — all computed in your browser.

Runs entirely in your browser

Check password strength, privately

Type or paste a password and get a live strength rating based on its length and the variety of character types, expressed as an entropy estimate in bits and a rough offline crack-time. The checker also flags common weaknesses — too short, only one character class, obvious sequences or repeats. Because everything runs in your browser, the password you enter is never transmitted or stored; this is a private, offline estimate, not a breach lookup.

Common questions

How is strength measured?

It estimates entropy in bits from the password length and the size of the character set it draws on (lowercase, uppercase, digits, symbols), then adjusts down for obvious patterns like sequences ('abcd', '1234') and repeated characters. More bits means exponentially more guesses to crack.

What does the crack-time estimate mean?

A rough guide assuming a fast offline attacker trying about ten billion guesses per second against a well-hashed password. It is an order-of-magnitude estimate, not a guarantee — a password reused across sites can be compromised regardless of its strength.

Does this check if my password was leaked?

No. It measures theoretical strength only and never contacts any server or breach database. To check for known breaches you would need an online service; this tool deliberately stays fully offline for privacy.

Is my password uploaded anywhere?

No. The password is analysed entirely in your browser with JavaScript. It is never sent over the network, saved, or logged — it exists only in the page while you are on it.