Password strength checker
See how strong a password is, how long it would take to crack, and how to improve it. Checked only on your device.
Runs on your device · nothing is uploaded
Type a password to check it.
Please don't type passwords you currently use for important accounts. Test the pattern, not the real password.
Time to crack (estimate)
Average time to guess this password by brute force if it were stored as a fast, unsalted hash such as MD5. The bars use a log scale from 1 second (left) to about 31 million years (right). Hover a row for the guess rate.
How the score works
The checker estimates entropy: how many guesses an attacker would need, based on length and the types of characters used. It then lowers the score for common passwords, repeated characters and keyboard sequences such as 1234 or qwer, because attackers try those first.
A real attacker uses huge lists of leaked passwords, so treat the result as a guide. Nothing you type leaves your device.
About the time-to-crack chart
The chart turns the entropy estimate into the average time a brute-force attack would take: half of all possible guesses, divided by the guess rate. The rates are rough figures for an offline attack on a fast hash. Real results depend on the hash: a slow password hash such as bcrypt or Argon2 cuts the guess rate by a factor of thousands to millions, and an online login with lockouts is slower still.