Password health check
Paste any password to score it. Analysis runs entirely in your browser — nothing is transmitted, logged, or stored.
Try one:
Offline analysis
Enter a password to see its entropy, security score, crack time, and the specific weaknesses an attacker would exploit first.
What length actually buys you
Average time to brute force each combination against an unsalted fast hash at one trillion guesses per second.
8 chars, lowercase only37.6 bits
instantlyWeak
8 chars, mixed case + digits47.6 bits
2 minutesFair
12 chars, mixed case + digits71.5 bits
51 yearsStrong
16 chars, full symbol set103.9 bits
294 billion yearsVery strong
20 chars, full symbol set129.8 bits
longer than the age of the universeExtreme
32 chars, full symbol set207.7 bits
longer than the age of the universeExtreme