Test how strong a password really is, and see exactly what weakens it.
Nothing is transmitted. Even so, prefer testing a password you are about to change.
A common password
See why this fails instantly
Password123A keyboard pattern
Looks random, is not
qwertyuiopA strong password
Random characters at length
7#kQ!p2Lz@9vX4wEA common password
See why this fails instantly
Password123A keyboard pattern
Looks random, is not
qwertyuiopA strong password
Random characters at length
7#kQ!p2Lz@9vX4wEThe analysis updates as you type. Nothing is transmitted, so you can safely test a password you actually use.
The rating is useful, but the warnings are what you act on — they name the exact pattern making the password predictable.
Usually the fix is length rather than complexity. Adding four characters helps more than substituting a 3 for an E.
Sequences, keyboard runs, repetition and the “Capitalised word plus year” shape are all things cracking tools try first, and all things a naive meter scores as strong.
A colour bar tells you nothing actionable. A sentence naming the weakness tells you what to change.
The password never leaves your browser — no request is made at any point, which is exactly the property a tool like this must have.
Most strength meters look at length and whether you used a capital letter. This one also looks for the patterns that make a password guessable long before its raw entropy suggests: dictionary words, keyboard runs like qwer, sequences like 1234, repeated characters, and the near-universal habit of capitalising the first letter and appending a year. You get a rating, the entropy in bits, an estimated offline cracking time, and a specific list of what is wrong rather than a vague score. Analysis is arithmetic performed in your browser — the password is never sent anywhere.
Keep going
Related pages in Security & Privacy, plus what others are using right now.
More security & privacy that pair well with this one.
Create strong random passwords with full control over length and characters.
Generate memorable passphrases that are strong because they are long.
Generate secure random strings, passwords and API keys with entropy shown.
Generate MD5, SHA-1, SHA-256, SHA-384 and SHA-512 hashes at once.
Check a downloaded file against its published checksum, without uploading anything.
Decode JSON Web Tokens and read the header, claims and expiry.
Format, validate and minify JSON, with errors that point to the exact line.
Work out any percentage — of a number, as a share, or as a change.
Count words, characters, sentences and paragraphs as you type.
Convert between length, weight, temperature, volume, speed, data and more.
Count characters with and without spaces, against the limits that matter.
Find the mean, median, mode and range of a list of numbers, with the working shown.
Sample and population standard deviation and variance, both shown, with the working.
Turn a logo into favicon.ico, the PNG sizes a site needs, and the HTML to declare them.
Stamp text like DRAFT or CONFIDENTIAL across a PDF, in your browser.
Turn JSON into readable YAML, with quoting and multiline strings handled properly.
Escape text for HTML, or turn entities back into readable characters.
Explain a cron expression in plain English and see exactly when it will next run.