Type a password to see how strong it is, how long it might take to crack and how to improve it. Nothing is sent anywhere — the check runs entirely in your browser.
| Online attack, 100 guesses per second | — |
| Offline, slow hash, 10 thousand per second | — |
| Offline, fast hash, 10 billion per second | — |
Your password never leaves this page: it is not sent, stored or logged. Need a strong one? Open the password generator.
A strong password is one that an attacker cannot guess in a realistic amount of time. Strength comes mostly from length and unpredictability: a long, random password is far harder to crack than a short one with a few symbols sprinkled in.
Attackers rarely try every combination in order. They start with leaked password lists, common words, keyboard patterns, years and predictable substitutions such as a for @, which is why a password that looks complicated can still fall in seconds. Estimates of cracking time therefore depend on the attacker's speed and on how the password is stored.
Treat any strength meter as a guide, not a guarantee. The safest habits are unique passwords for every account, a password manager to remember them, long random passphrases for the few you must type, and two-factor authentication wherever it is offered.