Password Strength Checker

Check how strong your password is against real-world attacks. Analyzes length, character variety, common patterns, dictionary words, and keyboard walks. Shows estimated crack time for brute-force and dictionary attacks. All analysis done locally — password never sent anywhere.

Never sent to any server — checked entirely in your browser.

Frequently Asked Questions

Is my password sent to a server when I check it?
No. All strength analysis is performed in your browser using JavaScript. Your password is never transmitted anywhere and is not stored.
What makes a password strong?
A strong password has 12+ characters, mixes uppercase and lowercase letters, numbers, and symbols, avoids dictionary words, and does not follow predictable patterns like 'Password123'.
What is the estimated crack time based on?
The estimate assumes a modern GPU performing billions of hash attempts per second. A 12-character random password with mixed character types would take over 100 years to crack.
What common password patterns does it detect?
Dictionary words, keyboard walks (qwerty, 123456), common substitutions (p@ssw0rd), date patterns, repeated characters, and the most common 10,000 passwords list.
What score should my password aim for?
Aim for 'Strong' or 'Very Strong' ratings. Anything below 'Medium' should be replaced, especially for accounts holding sensitive data.