Password Check
How strong is your password, really? This looks for the patterns attackers try first, not just length and symbols.
Checked on this device only. Your password is never sent, saved or logged. This page has no server and the browser blocks any network request it might try.
Type a password
Time to crack
| Attack | Time |
|---|---|
| Online, rate-limited 100 / hour | — |
| Online, no limit 10 / second | — |
| Offline, slow hash 10k / second (bcrypt) | — |
| Offline, fast hash 10B / second (GPU, MD5) | — |
What an attacker sees
Your password split into the cheapest-to-guess pieces will show here.
Tips
- Start typing to get advice for your password.
How the estimate works
The checker finds every pattern in your password: 1,282 common passwords, 2,381 English words
(also reversed, capitalised or with l33t swaps like @→a), keyboard walks (qwerty, 1qaz),
sequences (abc, 9876), repeats (aaa, abcabc), years and dates, then picks the
cheapest way to cover the whole password and counts the guesses that takes. The word lists are small so they fit in the page,
which means unusual words or names it doesn't know may score higher than they deserve. Treat the result as an upper bound.