tools / Passwords & Privacy
Password Strength Checker
See how much entropy a password actually has and roughly how long it would take to crack, all worked out locally. Nothing you type is sent anywhere, which is the whole point of checking a password on a page you do not fully trust.
0 bits0 chars-An estimate based on character variety at 10 billion guesses/sec. Predictable words and patterns are far weaker than the raw bits suggest.
How it works
Where the number comes from
Entropy is the length times log2 of the character pool the password draws from. More length and more variety means more bits, and each extra bit doubles the work to guess it.
Why patterns lose
The estimate assumes a random string. Real passwords lean on words, dates and keyboard runs, so a predictable one is far weaker than its raw bits suggest. This tool docks obvious patterns and flags the passwords that top every breach list.
FAQ
Is my password sent to a server?
No. The whole calculation runs in your browser, nothing is transmitted. If you want to know whether a password has leaked, use the breach check, which only sends a short hash prefix.
How many bits is enough?
Aim for 60 bits or more for accounts that matter, and higher for anything protecting other credentials. A long passphrase gets there comfortably.
