Password Strength

Estimate how strong a password is: entropy and crack-time.

Analysed on the server and never stored. Don’t test a password you actively use.

Related tools

Password GeneratorCreate strong random passwords with adjustable rules.Hash GeneratorMD5, SHA-1, SHA-256, SHA-512 and CRC32 of any text.HMAC GeneratorCompute an HMAC (SHA-256/512, SHA-1, MD5) from a key and message.

Frequently asked questions

How is password strength measured?

The tool estimates entropy in bits from the character variety and length, then translates that into an approximate offline crack time. More bits means exponentially harder to guess.

What is a good entropy target?

Aim for at least 60 bits for important accounts, and more for high-value ones. Length contributes the most, so a long passphrase often beats a short complex password.

Is my password sent anywhere?

It is analysed on our server over HTTPS and never stored or logged. Even so, do not test a password you actively use on other sites — generate a fresh one.