Type a password to see its estimated entropy, a strength rating, how long it would take an attacker to crack it offline, and concrete tips to make it stronger — all computed live in your browser.
100% private. Everything runs on this page, inside your browser. Your password is never sent, stored, logged, or transmitted anywhere — there is no server involved. You can even turn off your internet connection and it will still work.
Nothing you type here leaves your device.
Crack time assumes a fast offline attack at roughly 10 billion guesses per second (modern GPU rig against a fast/unsalted hash) and averages half the keyspace. Real-world time varies with the hashing algorithm and hardware.