Type a password and see how strong it really is – estimated entropy, how long it'd take to crack, and what's dragging it down. Everything is computed locally; your password never leaves your device.

What "entropy" means. A password's strength isn't about how many characters it has – it's about the number of guesses a cracker would need to try. Entropy is measured in bits: every bit doubles the guesses required. A 4-digit PIN has about 13 bits (10,000 combinations, crackable instantly). A random 8-character lowercase password has ~38 bits, while a random 12-character mix of upper, lower, digits, and symbols reaches ~72 bits – comfortably beyond what brute-force attacks can exhaust.

Length beats complexity. The fastest way to increase strength is length, not complexity. Each added character multiplies the search space, so a 16-character passphrase made of four random words (a "passphrase") can be far stronger than a short password stuffed with ! and @. This tool reports the estimated time to crack assuming an offline attacker using a single GPU – a rough guide, not a guarantee. For real protection, use a unique password for every site and store them in a password manager.

Generate a strong one instead? Try the Password Generator.

Related