What is Password Strength Tester?
Password Strength Tester analyzes a password the way an attacker would think about it: it estimates entropy in bits (length Γ character-pool size), then applies explicit penalties for the patterns that make passwords weak in practice β matches against a curated list of the most commonly breached passwords, repeated characters, sequential runs like abc or 123, and keyboard rows like qwerty. The result is a 0β4 strength score, crack-time estimates for four attack scenarios (throttled online, unthrottled online, offline slow hash, offline fast hash), and a checklist of exactly which checks your password passes or fails. All analysis runs in your browser; the password never leaves the page.
Common Use Cases
Auditing Existing Passwords
Paste a password you currently use (or a candidate) and see precisely why it is weak β length, missing character classes, a breached-list match, or a pattern β before you commit to it.
Testing New Account Setups
When setting up credentials for a new service, quickly verify the password meets your own strength bar rather than just the service's minimum requirements.
Security Reviews & Demos
Show stakeholders why "complex-looking" passwords like Tr0ub4dor&3 are still weak and what a genuinely random passphrase looks like.
QA of Password Rules
Validate your product's password policy against real entropy: check that the minimums you enforce actually produce strong passwords, not just compliant ones.
How to Use This Tool
- Type or paste a password into the input β analysis updates live as you type
- Read the 0β4 score and the entropy figure (in bits) with the pattern penalty called out
- Check the estimated crack times for the four attack scenarios
- Review the pass/fail checklist and the concrete suggestions for weak spots
- Click "Copy analysis" to paste the result into a ticket, review, or report
Related Tools
Learn More
- NIST SP 800-63B β Password Guidelines The US government's modern guidance: length over complexity, blocklists of common passwords, no forced periodic rotation.
- xkcd 936 β Password Strength The classic illustration of why "correct horse battery staple" beats "Tr0ub4dor&3" β entropy vs. complexity.
- zxcvbn β password strength estimator Dropbox's open-source strength estimator that popularized the score thresholds and crack-time model this tool uses.