Type a password to see an estimate of how strong it is, how long a guessing attack might take, and what to change. The check runs only inside this page: your password is never sent to a server, stored or logged. The result is an estimate based on length, character types and common patterns, so use it as guidance rather than a guarantee.
Loading the tool…
How to use the Password Strength Checker
- Type or paste a password into the box. Tick "Show password" if you want to see what you typed.
- Read the strength label and the estimated time for an online attack and a fast offline attack.
- Follow the tips under "How to improve it", such as adding length or removing patterns.
- Use a different strong password for every account, ideally from a password manager.
Frequently asked questions
Is it safe to type my real password here?
The check runs entirely in your browser and nothing is transmitted. Even so, it is wise to test a similar password instead of your real one, and to avoid typing passwords on shared computers.
What makes a password strong?
Length is the biggest factor. A passphrase of four or more unrelated words, or a random 14+ character password, is far stronger than a short one with a few symbols.
Why is "P@ssw0rd" rated weak?
Attackers know common substitutions like @ for a and 0 for o. They try these variations before random guesses, so they add very little protection.
Can this tell me if my password was leaked?
No. This tool works offline and cannot check breach databases. If an account may have been exposed, change its password right away.
What do online and offline attack times mean?
An online attack guesses through a login page and is slow because sites limit attempts. An offline attack happens after a database leak, where an attacker can try billions of guesses per second.
More free tools
This tool runs in your browser. The files and text you use are not uploaded to a server.