Is my password uploaded to your server?

No. Scoring, entropy math, and pattern checks run entirely in your browser memory. The password never leaves your device.

What makes a password strong?

Length dominates: 16+ random characters across 4 character sets exceed 90 bits of entropy. Avoid dictionary words, repeats, and personal data.

What crack times do you estimate?

We project offline attack speeds from 10k (slow hash) to 100B (fast hash) guesses per second so you can judge worst-case scenarios.

Should I use a passphrase instead?

Yes for memorability: 5-6 random Diceware words exceed 65 bits and resist dictionary attacks. Generate one with our password generator.

Password Strength Checker

Related Tools

Explore Cryptography Suite

TOTP Authenticator & 2FA Code Generator

Generate offline RFC 6238 TOTP codes with QR export, countdown ring, and copy-code support.

AuthenticationOpen →

Bcrypt Hash Generator & Verifier — Legacy Password Hashing

Generate standard $2a$ bcrypt password hashes with configurable cost rounds (4-12) and verify candidate passwords. Legacy hashing for existing systems — use Argon2id for new systems.

CryptographyOpen →

JWT Debugger & Encoder

Decode, encode, and verify JSON Web Tokens (JWT) safely in your browser with expiration countdown and signature verification.

TokensOpen →

Password & Passphrase Generator

Generate high-entropy random passwords and multi-word passphrases with custom rules.

GeneratorsOpen →

Inputs stay in browser memory. No external request is required for this operation, and zero data leaves your device.