Password Strength Analyser help

Password Strength Analyser gives a rough measure of guessing difficulty: the size of the character pool, the length, and penalties for repeats, keyboard runs, digit-only strings, and very common passwords.

Steps

  1. Type a password into the box. Use the show button if you want to see it.
  2. Read the rating, the entropy in bits, and the estimated offline crack time.
  3. Act on the warnings and tips below the meter.

Common questions

How is the crack time worked out?

It assumes an attacker who has the hashed password and can try about ten billion guesses per second against a fast hash. That is a deliberately pessimistic setup.

Why does my password with symbols still score low?

Length matters more than variety. A short password with symbols has fewer combinations than a long one without. The tool also penalises patterns like runs and repeats.

Is this zxcvbn?

No. It is a smaller model with a short built-in list of common passwords. It will not catch every dictionary word or personal detail, so treat borderline results with caution.

Is anything logged?

No. The check is entirely local and the field is cleared when you leave the page.

Everything runs in your browser. Nothing you enter or drop is uploaded.

Back to Password Strength Analyser