Password Strength Checker
100% PrivateSecurity & Privacy UtilitiesAnalyze a password's strength with a character-pool breakdown and a crack-time estimate.
Runs entirely in your browser. Your input is not uploaded to Ovatly or anywhere else.
The check runs entirely on this device. The password is never sent to Ovatly or anywhere else, and it disappears when you close the tab. For a real account password, checking it here is still fine, but never reuse a password you have typed into any other website.
Type a password above to see its breakdown. The entropy number is a character-pool estimate; the zxcvbn score also accounts for common words and patterns, so prefer it when the two disagree.
- 1Type or paste the password into the field; use Show if you want to see it while you type.
- 2Read the verdict and the zxcvbn score first; it catches patterns the pool estimate cannot see.
- 3Work through the Things to fix list and the class breakdown.
- 4If the password matters, replace it with a generated one and store it in a password manager.
For Summer2024! the character-pool estimate says about 72 bits, which sounds strong, but zxcvbn scores it only 2 of 4, warns that it is similar to a commonly used password, and estimates roughly 46 minutes to crack in a slow offline attack. The pool model cannot see that Summer2024! is a word plus a year plus a symbol, which is exactly the pattern guessing tools try first. Trust zxcvbn when the two disagree.
- Crack times are estimates from the zxcvbn library. They assume specific attack speeds and hardware; treat them as orders of magnitude, not promises.
- The entropy figure is a pool estimate: length times log2 of the character pool size. It assumes every character was chosen at random, which is rarely true for human passwords.
- The checker cannot know whether a password has appeared in a data breach; a strong score on a reused password is still a weak password in practice.
- Nothing you type is stored or sent anywhere; closing the tab discards it.
The check runs locally in your browser with no network calls, and the password is never stored. That said, good hygiene is to check passwords you are about to replace, and to do your everyday checking with the meter built into your password manager.
About this tool
The Password Strength Checker analyses a password two ways at once: a transparent character-pool breakdown (length, character classes, entropy estimate) and the zxcvbn library, which also recognises common words, names, keyboard patterns and dates. The password is checked entirely on your device and is never transmitted anywhere.
Related tools
Part of Ovatly's free tools in Security & Privacy Utilities.