Password strength checker
Type a password to estimate its strength. The check runs locally in your browser. Nothing is sent, logged or stored.
Start typing to see an estimate.
How the estimate works
The checker estimates the size of the search space from the length and the kinds of characters used, then subtracts strength for common patterns: dictionary words, keyboard runs such as “qwerty”, repeated characters, sequences such as “1234” and years. Guessing times assume an attacker can try ten billion guesses a second against a fast, unsalted hash, which is a pessimistic case.
What makes a strong password
Length matters more than complexity. A passphrase of four or more unrelated words is both strong and memorable. Use a different password for every account, keep them in a password manager, and turn on two-factor authentication wherever it is offered.