Client-side security check

Password Strength

Type a password to see how strong it actually is — entropy, estimated crack time under different attack conditions, and what's still missing. Nothing is sent anywhere; everything runs locally in your browser.

Security policy

Choose which requirements a password must meet — the checklist and pass/fail badge below update to match
Minimum length8 characters
Maximum length64 characters
Require uppercase letter
Require lowercase letter
Require number
Require symbol
Block commonly leaked passwords
Block sequences & repeated characters

Try a password

Never leaves this page
Enter a password — bits of entropy

Estimated crack time

Assuming an attacker knows only the password's length and character types
0
Strength score / 100
Attack scenarioTime to crack
Character mix

A simplified, illustrative heuristic — not a substitute for a full library like zxcvbn, and it doesn't check real-world breach databases.