Password Strength Checker
See how strong a password you already have really is, and how long it would take to guess. It is checked on your device and never leaves your browser.
Type a password you already use to see how strong it really is. It is checked here in your browser, against the patterns and leaked-password lists attackers actually try — nothing is sent anywhere, and nothing is saved.
Password to check
Stays in this browser tab. It is never sent, stored or remembered.
Nothing to check yet. Start typing above and the strength, the time it would take to guess, and what to change all appear here.
How is a password's strength measured?
Not by counting capitals and symbols. A password is only as strong as it is hard to arrive at, so this tool asks a different question: how many guesses would it take to reach this exact string? It looks for the things guessing software already knows to try — words, names, dates, runs along the keyboard, leaked passwords, and the familiar substitutions like 3 for e.
That is why P@ssw0rd1 scores badly despite having four character types, and why a few unremarkable words in a row can score well. Length and unpredictability are what move the number; decoration does not.
The times above assume the attacker has to guess. If a password has already appeared in a breach, none of that applies — it is simply known, and the only fix is to change it.
Everything happens on your device. Your passwords never leave this browser.