Password GeneratorGenerate strong random passwords with your choice of length and character sets, using your browser’s cryptographic random number generator.
Password Strength Checker
Type a password to see an estimate of how hard it is to guess, with the specific weaknesses found. The estimate is deliberately transparent: it starts from the length and character types, then subtracts for patterns attackers try first. It is a guide, not a guarantee.
0Score (0–4)
0Estimated entropy
0Offline fast attack
0Throttled online attack
Runs entirely in your browser. Your input and files are not uploaded to any server.
How to use
- Type or paste a password. It is masked unless you choose to show it.
- Read the score and the list of findings.
- Fix the weaknesses or generate a new random password.
Examples
Weak
“P@ssw0rd2024” is a common password with substitutions and a year.
Strong
A 20-character random password with no patterns.
Privacy
Runs entirely in your browser. Your input and files are not uploaded to any server. See the privacy policy for what is stored in your browser (favorites and history only). Privacy policy
Check it yourself: open your browser’s developer tools, select the Network tab and use the tool. Your file never appears in an upload request. Once this page is saved for offline use, you can also disconnect from the internet and keep working. Ads and anonymous visit statistics, when enabled, make their own requests, but they never receive your files or text.
Frequently asked questions
Is my password sent anywhere?
No. The check runs in this page; nothing is stored, logged or sent, and the page makes no network requests while you type.
How is the guessing time calculated?
From the estimated entropy, assuming an offline attacker making ten billion guesses per second against a fast hash. Real attacks vary widely.
Does it check data breaches?
No. Checking breach databases would require sending data to a third party, which this tool never does.
Related tools
All Security & PrivacyText Encrypt / DecryptEncrypt a private note with a password using AES-256-GCM and PBKDF2, then decrypt it later on this page.
Hash Generator (SHA)Generate SHA-1, SHA-256, SHA-384 and SHA-512 hashes and HMAC signatures of text using the browser’s Web Crypto API.
EXIF Viewer & Metadata RemoverView EXIF metadata in JPG photos — camera, date, GPS location — and download a clean copy with metadata removed.
UUID GeneratorGenerate random UUID v4 or time-ordered UUID v7 identifiers in bulk using your browser’s secure random generator.
JWT DecoderDecode a JSON Web Token to read its header and payload, with expiry and issued-at times in readable form.