Security
Password Strength Checker
Runs entirely in your browser · Nothing is sent to our servers
Entropy, crack time, and suggestions. Runs entirely in your browser.
How it works
Entropy (bits) measures how hard a password is to guess. It is calculated from character set size and password length.
Fast hash simulates attacks at ~1 billion guesses/sec (MD5, SHA-1). bcrypt simulates ~10,000/sec — the rate modern systems enforce.
The profile-aware warning flags passwords that contain your name, email prefix, or website domain — information an attacker who knows you could try first.
Runs entirely in your browser · Nothing is sent to our servers
How it works▾
Entropy (bits) measures how hard a password is to guess. It is calculated from character set size and password length.
Fast hash simulates attacks at ~1 billion guesses/sec (MD5, SHA-1). bcrypt simulates ~10,000/sec — the rate modern systems enforce.
The profile-aware warning flags passwords that contain your name, email prefix, or website domain — information an attacker who knows you could try first.
Runs entirely in your browser · Nothing is sent to our servers