Password Strength Checker

Check Password Strength Online — Free Password Strength Checker

Find out how strong a password really is. Type or paste one in and see an instant rating, an estimate of how long it would take to crack, and specific tips for making it harder to guess.

How to Check a Password

Type a password into the box — use Show if you want to see what you're typing — and the strength meter updates with every character, rating it from Very weak to Very strong. Below the meter you'll see the length, how many of the four character types it uses, an estimated strength in bits, a checklist of what it does and doesn't do well, an estimate of how long it would take to crack, and up to four suggestions for improving it.

What Makes the Score Go Up or Down

Length matters most. The checker also looks at whether the password mixes upper and lower case letters, numbers, and symbols, and whether it's one of the commonly used passwords that attackers try first. It penalises predictable patterns too: dictionary words and names (even with capitals or swaps like @ for a and 0 for o), sequences such as abc, 123, or qwerty, repeated characters, and years. That's why something like Summer2024! scores poorly despite ticking every box on a typical password-rules list, while a long passphrase of unrelated words scores well. Passwords shorter than 8 characters are never rated higher than Weak.

The crack-time estimates cover three situations: an online attack against a site that limits guesses, an offline attack on a slowly hashed password, and an offline attack on a quickly hashed one. These are estimates based on a small built-in word list — real attackers use far larger ones — so treat the score as a guide rather than a guarantee. Whatever the result, use a different password for every account, keep them in a password manager, and turn on two-factor authentication where you can.

Good Uses for This Tool

Checking a password before you set it, understanding why an old favourite is weak, comparing a passphrase with a complex-looking short password, and showing colleagues or family how much length and randomness matter.

Is It Actually Private?

Yes. The password is analysed only in your browser tab — it is never sent anywhere, stored, or logged. Even so, it's sensible not to type a password you use for a real account into any website; test a similar one instead.