1. Home|
  2. Tools|
  3. Password strength checker
Free tool

Password strength checker

Enter a password and see how well it holds up against cracking, where its weak spot is and what to fix. The check runs on your device — your password doesn't go anywhere.

  • No sign-up
  • Nothing is sent
  • Real-time rating

Updated:

Share

The check runs in your browser. The password is not sent anywhere and is not saved.

Enter a passwordEntropy measures how many guesses it takes on average to hit the password — each bit doubles that number. Below 40 bits a password falls in hours, between 40 and 60 it lasts days, between 60 and 80 — years, and above 80 it is beyond the reach of today's hardware. The estimate assumes an offline attack at about 100 billion guesses per second, so it is deliberately pessimistic.

Checks

    What to fix

    • Tips will appear here.

    Don't have a suitable password? Generate a new one

    How to use the tool

    1. Enter or paste your password

      The field is hidden by default; use the button next to it to reveal the password and check what you pasted.

    2. Look at the rating

      The bar shows the strength, and next to it are the bits of entropy and how long cracking would take in an offline attack.

    3. Fix the weak spots

      The checks on the right tell you exactly what's missing — length, a character group, repeats, keyboard sequences or a known password.

    Frequently asked questions

    No. The entire analysis is JavaScript running on your device. There's no server request and nothing is stored in the browser — once you close the page, no trace of the password remains.

    The length and the character groups used give the number of possible combinations. From that we subtract the patterns an attacker tries first: repeats, keyboard sequences, years and known passwords. What remains is expressed in bits of entropy.

    Usually because of a pattern. “Parola2024!” has a capital letter, digits and a symbol, but it's a word, a year and an exclamation mark — exactly what cracking programs try in the first few seconds.

    No. Such a check requires sending the password (or part of its hash) to an external service, and this tool deliberately makes no outside requests. If the password is among the best-known ones, you'll see a warning.

    Our other tools

    All tools

    Make a difference with Web Factor

    Make a difference with Web Factor

    Ready for a new website? Let's build it.

    Get in touch so we can discuss your needs and see how we can help you reach your goals

    Start a projectContact us

    Call now:

    We're available every day from
    8:30 a.m. to 8:30 p.m. (Sofia time)

    +359 88 33 22 379