Calculators
Password Strength
Check how long a password would resist an offline attack.
Runs entirely in your browser — nothing is uploaded
This is a character-set estimate, not a dictionary check. A password like password1 scores on its length and mix of characters, but would in reality fall in seconds to a wordlist attack. Treat the result as an upper bound, and prefer a generated password or passphrase.
Frequently asked questions
Is it safe to type my real password here?
The check runs entirely in your browser and nothing is sent or stored. Even so, a habit of not pasting live passwords into websites is a good one.
How is the crack time estimated?
From the password's entropy against the speed of a modern offline attack on leaked hashes, which is far faster than guessing at a login form.