Password strength checker

Estimate how strong a password is, how long an offline attack could take and how to improve it. Checked locally, nothing is sent.

Runs in your browser · nothing is sentPasswords & secrets

Password

🔒 Checked in your browser. Nothing is sent or stored.

About this tool

Type a password to see an estimated entropy, a rough cracking time and concrete suggestions. Nothing leaves your browser.

🔒 Your input stays in your browser and is never sent anywhere.

Is this estimate exact?

No. It is a rough guide based on length and character variety. Longer, random passwords or passphrases are best.

Bcrypt hash generator & verifierCreate bcrypt password hashes with a chosen cost factor and verify a password against a hash. Runs locally in your browser.
IAM Policy analyzerPaste an AWS IAM policy to find overly broad permissions, privilege escalation paths and confused-deputy risks, and simulate requests.

Found a problem or have a suggestion? Tell us