Password strength analyser

Analyze password strength and get improvement suggestions

Password Strength Analyser

Enter a password to analyze its strength and security

TL;DR

What is Password strength analyser?

Password strength analysis estimates how resistant a password is to guessing or brute-force attacks. It considers length, character variety (lowercase, uppercase, digits, symbols), and common patterns (dictionary words, keyboard walks, repeated characters) to give a practical security score.

Common use cases

  • User registration: validate that a password meets a minimum security threshold before accepting it
  • Password policy auditing: test whether your current password requirements produce meaningfully strong passwords
  • Developer testing: generate candidate passwords and verify they score at the desired strength level

Frequently asked questions

What makes a password strong?

Length is the single most important factor. A 16-character random password is exponentially harder to crack than an 8-character one, even if the 8-character version uses special characters. A passphrase of 4-5 random words is both strong and memorable.

What is entropy in the context of passwords?

Entropy measures unpredictability in bits. A password with 60 bits of entropy means an attacker would need to try 2^60 guesses on average. Each additional character from a larger character set adds more bits of entropy.

Does this tool send my password anywhere?

No. All analysis happens in your browser. The password is never transmitted to a server. Still, avoid analyzing real production passwords in any online tool as a best practice.

See also

  • Bcrypt: once you have a strong password, hash it with bcrypt before storing it so a database breach does not expose the plaintext
  • Token generator: generate a cryptographically random token as an alternative to a human-chosen password for API keys and machine credentials