Password strength analyser

Estimates password strength and approximate cracking time, to judge whether a password is good enough.

Discover the strength of your password with this client-side-only password strength analyser and crack time estimation tool.

Steps and notes

What is Password strength analyser?

Analyse a password's strength entirely in your browser — entropy, common-pattern checks and a crack-time estimate. Nothing is submitted anywhere, so it is safe to probe the passwords you actually use; the point is to see which weaknesses (length? reuse? predictable structure?) dominate your risk.

  1. Enter the password to evaluate
  2. Read the strength bar and estimated cracking time
  3. Lengthen it or add character classes as suggested
  • The calculation runs entirely in your browser; the password is never sent anywhere

Frequently asked questions

How is "time to crack" estimated?
It models an attacker guessing at some rate (billions per second for offline attacks on a stolen hash). The estimate is orders-of-magnitude, not a prophecy — relative comparisons between passwords are what matter.
Is a complex short password better than a long simple one?
Usually not. Length dominates: a four-word passphrase outruns a 9-character symbol soup because entropy grows with every added character of vocabulary, not only with symbol variety.
Does the tool store or transmit my password?
No — the analysis runs client-side and the input never leaves the page. Still, measuring a password on any shared machine carries some risk; prefer your own device.

Read the full step-by-step guide for this tool

Category: Crypto

Hashing & crypto workflow

Hash Generator — MD5, SHA-1, SHA-256 Online → HMAC Generator — Sign Messages with SHA-256 Online → Bcrypt → Encrypt / decrypt text → RSA Key Pair Generator → Password strength analyser → htpasswd generator and checker