Checking password strength

Yes. All processing happens in your browser on your device. Your password isn’t sent to a server or saved. The code runs locally.

The score is based on brute force: it takes into account the character set size (lowercase letters, uppercase letters, digits, special characters) and password length. It uses a rate of ~10 billion attempts per second for an offline attack.

Sequences like 123, qwerty, password, and abc123 are easy to guess using dictionaries. The tool checks for these patterns and lowers the score.

At least 12 characters, with a mix of lowercase and uppercase letters, numbers, and special characters. Avoid dictionary words and personal information. Generate strong passwords with the Password Generator.

Each additional character increases the number of possible combinations. An offline attack can crack an 8-character password in seconds, a 12-character password in hours, and a password with 16+ characters in years.