Privacy first. This checker runs entirely in your browser. Your password is never sent to any server — except the optional Have I Been Pwned check below, which uses k-anonymity (only a 5-character hash prefix is sent, never the password itself).
Analysis happens as you type — nothing leaves this page.
Strength Score
—
Estimated Crack Time
Attack Context
Estimated Time
Online throttled (100/hour)
—
Online unthrottled (10/sec)
—
Offline slow hash (10k/sec)
—
Offline fast hash (10B/sec)
—
Feedback
Character Analysis
Length
0
Uppercase
0
Lowercase
0
Digits
0
Symbols
0
Unique Chars
0
Pattern Checks
Have I Been Pwned (optional)
Checks if this password appears in known data breaches. Uses k-anonymity: only the first 5 characters of the SHA-1 hash are sent — the password itself never leaves your browser.
This tool provides an estimate of password strength for educational purposes. Actual risk depends on many factors including how the password is stored and transmitted. No tool can guarantee security — always combine strong passwords with two-factor authentication.