Honest password scoring: entropy, crack time, breached-list and pattern checks

Charset pool entropy at 10 billion guesses/sec, top-40 leaked passwords, repeat/sequence/keyboard-walk detection.

Quick answer: Check how strong your password is — entropy bits, crack-time estimate and common-password detection. Scored entirely on this page, never sent anywhere.

Type a password — scoring updates as you type.

How to use

  1. Type or paste a password (Show toggles visibility).
  2. Read the verdict bar, entropy bits and crack-time estimate.
  3. Fix what the notes flag, then re-check.

About this tool

Most password strength meters are theater. This one shows its math: entropy in bits based on the true character-pool size, a crack-time estimate at 10 billion guesses per second (a realistic offline-attack speed), detection of the ~40 most breached passwords of all time, repeated-character runs, keyboard walks like qwerty, and sequences like abc or 123. The verdict bar maps to five honest levels from Very Weak to Strong. One promise above all: your password is scored locally in this tab and is never transmitted, logged, hashed or stored anywhere — check your realest password if you like, because it physically cannot leave your device. Everything runs locally in your browser — nothing is uploaded, nothing is sent to any server, and closing the tab erases it all.

FAQ

Is my password sent anywhere?
No — scoring is plain JavaScript in this tab; there is no network code on this page at all.
What crack speed is assumed?
10 billion guesses per second — a realistic offline attack on a leaked hash, so estimates are pessimistic on purpose.
Why is P@ssw0rd1 rated weak?
Patterns and dictionary words dominate: crackers try mangled dictionary words long before exhausting a 95-character pool.
Is length really king?
Yes — each extra character multiplies attack time by the pool size; 16+ random characters is out of brute-force reach.
Does this store anything?
Nothing — no cookies, no storage keys, no logs. Everything runs locally in your browser — nothing is uploaded, nothing is sent to any server, and closing the tab erases it all.

Rate this tool

Your rating stays in this browser (local storage) — nothing is sent to any server.