How strong is my password?
Type a password and see how long it would take to crack. It never leaves your device.
Assuming 10 billion guesses per second: an attack on a stolen database with a fast hash.
How is the strength calculated?
We count how many combinations an attacker would have to try. Length and types of characters set the starting point. Then we subtract for what attackers try first: common passwords, words, years, dates, sequences and repetitions. Words in a row count as words, not as separate letters. We also run zxcvbn, an open-source password estimator from Dropbox, and always keep the lower result.
Is it safe to type my password here?
Yes. The calculation happens in your own browser and your password never leaves your device. Nothing is sent, stored or logged. We only count anonymously that the test was used and which level came out, never anything about the password itself.
What makes a password strong?
Length and randomness. A random password of 16 characters or more, or five random words, is beyond anyone’s reach to guess. Use it for one account only and keep it in a password manager. Patterns like Welcome2024! look strong, but are guessed quickly.