Free Online Password Strength Checker
A password strength checker scores a candidate from 0 to 100 by combining Shannon entropy across character classes, common-password lookups and crack-time estimates.
Your data is processed entirely in your browser and never sent to any server.
How to Use This Tool
- Type a sample password into the Password field.
- Watch the 0–100 score, label and entropy update live as you type.
- Read the crack-time estimate and the list of specific suggestions.
- Tweak length and character variety until the score reaches "strong" or "very strong".
What Is a Password Strength Checker?
Strength scoring blends two ideas: how many possible passwords there are of your shape (entropy, in bits) and how predictable yours is given known patterns. This tool starts from the entropy of an unrestricted draw across the character classes used, then applies penalties for repetition, common keyboard sequences (qwerty, 12345), and matches against a built-in list of the top 100 leaked passwords from breach corpuses like RockYou and Have I Been Pwned.
The crack-time estimate assumes an offline attacker capable of 10 billion guesses per second against a fast hash — roughly a single high-end consumer GPU. Anything above a few centuries is a practical brick wall; anything under "days" should be treated as already broken.
The golden rules: length beats complexity (a 20-character passphrase beats an 8-character symbol soup), uniqueness beats strength (a reused strong password is leaked the moment the weakest site is breached), and storage beats memory (use a password manager). Despite the local-only computation, do not paste a real production password into any web tool — type a representative sample instead.
Frequently Asked Questions
Should I paste my real password?
What makes a strong password?
How is the score calculated?
Published by the WeGotEveryTool team. We build and test every tool in-house and update pages when the underlying spec, formula, or recommendation changes.
Reviewed: May 2026. Disclaimer: this tool is provided as-is for general informational use. For decisions with material consequences (medical, legal, financial, security) verify results against a qualified professional source.
Related Encryption & Security
Generate cryptographically random passwords with entropy display and custom symbol sets.
Generate Diceware-style passphrases. Memorable multi-word passwords with configurable length and separators.
Generate cryptographically random API keys. Hex, Base64, Base62 or alphanumeric with optional prefix.
Generate TOTP codes (Google Authenticator style). RFC 6238 two-factor authentication codes.