Password Strength Checker – How Strong Is Your Password?
The Password Strength Checker instantly analyzes any password for length, character variety, common patterns, and whether it appears in a list of the most-used passwords. It shows a score out of 100, an estimated crack time based on a 10-billion-guesses-per-second attack, and specific suggestions to improve your password. Everything runs locally — your password never leaves your browser.
Frequently Asked Questions
Is my password sent to a server?
No. The password strength checker runs entirely in your browser using JavaScript. Your password is never sent to any server, never stored, and disappears the moment you close or refresh the page.
How is the strength score calculated?
The score (0–100) is based on multiple factors: length (8+ chars adds 10 points, 12+ adds 15 more), character variety (uppercase, lowercase, numbers, symbols each add points), absence of common patterns like "123" or "qwerty", no repeated characters, and whether the password appears in a list of the 20 most commonly used passwords (which instantly sets the score to 0).
How accurate is the crack time estimate?
The estimate is calculated as charset_size^password_length / 10,000,000,000 (10 billion guesses per second, representing a modern GPU cracking rig). It assumes a brute-force attack against the raw password. Real-world crack times vary significantly based on attack method (dictionary, hybrid, targeted), hashing algorithm, and whether the attacker knows anything about your password patterns.
What makes a password "Very Strong"?
A Very Strong password scores 75 or higher. Typically this means: at least 12 characters (16+ is best), a mix of uppercase letters, lowercase letters, numbers, and symbols, no dictionary words or common patterns, and no repeated character sequences. The generated password always meets these criteria.
How does the password generator work?
The generator uses the Web Crypto API (crypto.getRandomValues) to create a cryptographically random 16-character password with guaranteed uppercase, lowercase, number, and symbol characters. The characters are then shuffled randomly. It's automatically copied to your clipboard and shown in the input field for review.