How to use the Password Strength Checker
- Type a password.
- Read the strength rating and crack-time estimate.
- Follow the tips, or generate a new one.
About this tool
Password meters on sign-up forms often reward the wrong things — a capital letter and an exclamation mark turn “Password1!” green. Real attackers use dictionaries, leaked-password lists and keyboard patterns first. This checker estimates entropy, then penalises common passwords, repeated characters and sequences like “1234” or “qwer” to give a more honest verdict.
The crack-time figure assumes an attacker with a fast GPU rig making ten billion guesses per second against a fast hash — a realistic worst case after a data breach. Slow password hashes (bcrypt, Argon2) make real-world attacks thousands of times harder, but you can't know which one a website uses.
Frequently asked questions
Is it safe to type my real password?
It never leaves your device, but best practice is to test a similar pattern rather than your actual password.
Why is length more important than symbols?
Each extra character multiplies the search space; symbols only enlarge it modestly.