Skip to content

Free security tool

Password strength checker: how long would it take to crack yours?

See how strong a password really is, how long it would take to guess in three attack scenarios and what to change - checked in your browser, never sent.

  • ✓ Runs in your browser
  • ✓ Nothing uploaded
  • ✓ Works offline
  • ✓ No sign-up

Checked only in this browser: the password is not sent, saved or added to the link.

Need a strong one? Generate a password →

Strength

-
Online, with login limits
-
Stolen database, strong hashing
-
Stolen database, fast hashing (GPU)
-
Guesses needed
-
  • Type a password to see how long it would take to guess.

Sponsor this tool

About this tool

Is your password strong? Attackers do not try random characters first: they try leaked passwords, dictionary words, keyboard runs like qwerty, repeated characters and years, and only then everything else. This checker looks for those same patterns - including swaps like @ for a and 0 for o - estimates how many guesses an attacker would need and shows the time to crack it online, with a stolen database protected by a strong hash and with a fast hash on a graphics card. It runs entirely in your browser: the password is not sent, saved or put in the link.

How to use it

  1. 1 Type or paste the password.
  2. 2 Look at the strength meter and the time to crack it.
  3. 3 Read the tips to make it stronger.
  4. 4 Generate a new random one if it is weak.

Frequently asked questions

Is it safe to type my real password here?

The check runs only in your browser: nothing is sent to a server, saved or added to the address. Still, if you prefer, test a password with the same pattern instead of the real one.

What makes a password strong?

Length and unpredictability. Twelve or more characters with no words, names, dates or keyboard runs - or four or five random words - resist far longer than a short word with a symbol at the end.

Why does 'P@ssw0rd' score so low?

Because attackers apply the same swaps (@ for a, 0 for o) to their word lists. A common password with symbols is still a common password.

Does it check if my password was leaked?

Not against leak databases - that would need the internet. It does know the most leaked passwords and flags them as very weak.

Embed this tool

Add this free tool to your own website — copy the code below. It stays up to date automatically.

Tools for your site →

More free tools

Passwords & security · Browse all 80 free tools