Password strength checker
Find out how long a password would hold up against a cracking tool, and the habits that make it weaker than it looks. The check runs on your device, so what you type never leaves it.
Strength appears here.
Checked on your device. What you type is never sent to us, saved or logged. Even so, it is good practice not to type your real, current passwords into any website. Test a similar one instead.
Password strength, answered
It estimates how many guesses an attacker would need, based on length and the kinds of characters used, then reduces that for the patterns cracking tools try first: common passwords, keyboard runs, repeated characters, years and a capital letter with a number on the end. It is an estimate, not a guarantee.
Because it follows the most common pattern there is: a word, a year and a symbol. Cracking tools try those combinations very early, so it falls far faster than its length suggests.
The check happens in your browser and nothing is sent, saved or logged. Even so, it is good practice never to type a real, current password into any website. Test one that follows the same pattern instead.
Strength is only part of it. A strong password used on more than one site is exposed the moment any of those sites is breached. Use a different password for every account, keep them in a password manager and turn on multi-factor authentication.
Not sure where your biggest risks are?
The free two-minute security check gives you a scored report and the next thing to fix.