Password Strength Checker

How the estimate works

Strength is reported as Shannon entropy in bits — the size of the character pool times the password length. The crack-time figure assumes an offline attacker running ~10¹¹ guesses per second against a modern hash (a high-end consumer GPU rig). Real-world speed depends on the algorithm; for bcrypt or Argon2 with sane parameters, real attacks are billions of times slower.

This page does not send your password to any server. It checks against a small built-in list of the most common passwords; for a full breach check use a tool that consults the HIBP k-anonymity API.