Password Strength Tester
Measure your password's real strength — entropy, crack time, and weak spots — checked entirely on your device. It's never sent anywhere.
🔒 Your password is analyzed locally with JavaScript and never transmitted, logged, or stored. Nothing leaves this tab — close it and the password is gone. (We don't even autofill or save it.)
Checklist
How to make it stronger
How crack time is estimated
We estimate entropy as bits = length × log₂(pool size), where the pool is only the character sets you actually used (26 lowercase, 26 uppercase, 10 digits, ~33 symbols). When a common password, dictionary word, sequence, or repetition is detected, the effective entropy is reduced because an attacker would try those first.
Crack time assumes an offline attacker who has the leaked hash and guesses at 10 billion guesses/sec (a strong consumer GPU against a fast hash like unsalted SHA-1):
*This is a guide, not a guarantee. A slow, salted hash (bcrypt/argon2) would take far longer to crack; a weak reused password could fall instantly to a credential-stuffing list regardless of entropy. Use a password manager and unique passwords everywhere.