Security ToolsFree
Password Strength Checker
Never sent to any server — checked entirely in your browser.
Frequently Asked Questions
Is my password sent to a server when I check it?▼
No. All strength analysis is performed in your browser using JavaScript. Your password is never transmitted anywhere and is not stored.
What makes a password strong?▼
A strong password has 12+ characters, mixes uppercase and lowercase letters, numbers, and symbols, avoids dictionary words, and does not follow predictable patterns like 'Password123'.
What is the estimated crack time based on?▼
The estimate assumes a modern GPU performing billions of hash attempts per second. A 12-character random password with mixed character types would take over 100 years to crack.
What common password patterns does it detect?▼
Dictionary words, keyboard walks (qwerty, 123456), common substitutions (p@ssw0rd), date patterns, repeated characters, and the most common 10,000 passwords list.
What score should my password aim for?▼
Aim for 'Strong' or 'Very Strong' ratings. Anything below 'Medium' should be replaced, especially for accounts holding sensitive data.