How strong is your password?
A password's strength depends on how many guesses an attacker would need to find it. Length matters most, then the variety of characters, and above all, whether it follows a predictable pattern. This checker looks at all three. It warns you about the most common passwords, keyboard runs, repeated characters and years, and estimates how long a fast cracking computer would take to guess it.
How to use the checker
- Type a password. Click the eye icon to show or hide it.
- Read the rating, the estimated crack time and the suggestions.
- Improve the password until it is rated Strong or Very strong. For a ready-made strong password, use our Password Generator.
How the estimate is calculated
First, the tool works out the size of the character pool: 26 for lowercase, 26 for uppercase, 10 for digits and about 33 for symbols. Entropy is length × log₂(pool). Then points are taken away for weaknesses that real attackers exploit, such as dictionary words with simple substitutions ("p@ssw0rd"), sequences like "123" and years. The crack time assumes an offline attack trying 10 billion guesses per second, which is realistic for a modern graphics card against a weakly stored password.
What a strong password looks like
| Password | Rating | Why |
|---|---|---|
india123 | Very weak | Common word plus a sequence |
Rahul@1995 | Weak | Name, symbol and year: a very common pattern |
mango-river-blue-tiger | Very strong | Long passphrase of random words |
t7#Kq9!vRz2&mW4p | Very strong | 16 random characters from all sets |
Beyond strength: staying safe
Even a perfect password is useless if it leaks from a website that stored it badly. Use a unique password for every site, turn on two-factor authentication, and change a password straight away if you hear the service was breached.
Frequently asked questions
Is it safe to type my real password here?
The check runs entirely in your browser and nothing is sent or stored. If you prefer, test a similar password instead of your real one.
Why is my password with symbols rated weak?
Symbols help only when the rest is unpredictable. "Password@123" follows a pattern every cracking tool tries early.
Is the crack time exact?
No. It is an estimate to compare passwords. Real attack speed depends on how the website stored the password.