Check length and obvious patterns with a limited local password-strength indicator.
This transparent heuristic considers length, repetition and a small set of obvious patterns. It does not estimate cracking time, check leaked passwords or certify compliance with NIST or OWASP. A high indicator can still describe an unsafe password.
Enter an example, review the indicator and reasons, and clear the field when finished. Sharing includes only the clean page link: it never restores the input or result.
Up to 256 Unicode code points, including spaces. A visible character can contain several code points; input is not trimmed or normalized.
Enter an example to see the indicator.
Limited indicator: does not check breaches or guarantee security.
Use a unique password and a password manager. Avoid personal information and predictable phrases, and enable MFA where supported.
The input stays in page memory and is not sent or stored by this tool. This does not protect against browser extensions or a compromised device. Do not put secrets in the page URL: URLs may already reach the server before this page runs.
Repetition, predictable sequences, reuse and public phrases matter. This heuristic flags only a few patterns and can miss dangerous passwords.
No. No breach service or comprehensive dictionary is queried. NIST and OWASP provide context for our explanations, not validation of this score.
Further reading: NIST SP 800-63B-4 · OWASP
Generate a new password