Home › Tools › Password strength checker

How strong is your password?

Type a password and see how long it would survive a real attack — and exactly what's making it weak.

Nothing leaves your device. This check runs entirely in your browser. Your password is never sent over the internet, saved, or logged. You can even turn off wifi and it still works.
Waiting… Time to crack: —
    Don't want to type yours? Try one: password1 P@ssw0rd! Liverpool2024 correct-horse-battery-staple

    Here's the catch

    A password strong enough to be safe is too long to remember — and you need a different one for every account. That isn't laziness, it's impossible by hand. A password manager creates and remembers them for you, so you only ever remember one. It's the single biggest upgrade you can make to your online safety.

    See the best free password managers → 1Password vs Bitwarden
    How this estimate works (and what to trust)

    This checker uses zxcvbn, the open-source strength estimator built by Dropbox. Instead of naively counting character types, it models how real attackers work: it looks for dictionary words, names, dates, keyboard runs like qwerty, repeats, and predictable substitutions such as P@ssw0rd. It then estimates how many guesses your password needs and shows the time to crack it in a fast offline attack — about 10 billion guesses a second, a realistic rate against a stolen password database.

    It's a guide, not a guarantee. The real lessons are simple: length beats complexity, every account needs its own password, and a long string of unrelated words beats a short "complicated" one like P@ssw0rd!.

    Common questions

    Is it safe to type my password here?

    Yes — the check happens inside your browser and your password never leaves your device. If you're still uneasy, hit Generate and test one of those instead.

    What actually makes a password strong?

    Length first. A passphrase of four or five unrelated words is both very strong and easy to remember. Avoid names, dates and single dictionary words — and don't rely on swaps like P@ssw0rd, which crackers try first. Never reuse the same password across sites — see how to create strong passwords you'll actually remember.

    How do I keep track of dozens of strong passwords?

    You don't — a password manager does it for you. Start with our simple setup walkthrough, or see why password managers are safe. You can also check whether a password has leaked in a breach.