Runs locally in your browser. Nothing you enter is uploaded to our servers.
Tips for reading strength scores
Treat the score as a rough estimate, not a guarantee.
Length and uniqueness matter more than fancy symbols alone.
A “strong” reused password is still risky if breached elsewhere.
Check high-value accounts with a breach lookup as well.
Use the result to improve the password, not to justify weak ones.
How the strength check works
Processing stays in your browser — your input is not uploaded to our servers.
The meter estimates how resistant a candidate is to guessing — length, character variety, and common patterns — without sending the value anywhere.
Treat a “strong” score as a hint, not a guarantee. A unique secret in a manager still matters more than a green bar.
Check a password candidate
Paste or type the candidate
Use a password you are evaluating, not a live production secret if someone can see the screen.
Read length and variety
Short or single-class strings score poorly even if they look “clever”.
Adjust and re-check
Change the candidate here, then save the version you keep in a manager — not a slightly different one.
Password strength FAQ
Does a high score mean the password is safe?
It means the shape looks hard to guess. Reuse, phishing, and leaks can still burn it.
Is the password uploaded?
No. Scoring runs in the browser on this page.
Why does a long passphrase score well?
Extra characters explode the search space. That is usually more important than mixing every punctuation mark.