Every password feels strong until you see the brute-force math. Attackers' rigs guess billions of combinations per second, and the survival time of your current passwords is measurable.
Updated August 15, 2026, after a fresh review, with updated visuals and links.
Type any password below (it stays in this tab, nothing transmits) and watch the meter, the verdict, and the estimated crack time update with every keystroke.
Reading your crack time
The estimate assumes 100 billion guesses per second, the level of rented cloud GPU clusters. Anything under 'hours' belongs in the trash today.
The meter rewards length hardest: past 14 characters the crack times explode exponentially because each added slot multiplies the search space by the whole character pool.
Common-word penalties are real: containing 'dragon', 'qwerty' or 'iloveyou' puts you in attackers' first-dictionary files, before brute force even starts.
Worth remembering
- Passphrases win for typed passwords: four random words like 'coffee-lantern-orbit-zebra' are long, strong, and typeable from memory.
- Never test your real current password on any website, including this one: test a similar pattern instead (same length and character mix).
Frequently asked
Does this tool store what I type?
No. All scoring runs in JavaScript inside your browser tab; the page works even with the network cable pulled.
My 8-character password with a symbol passed: why?
Symbols help, but length dominates the math. An 8-character password with a symbol survives minutes to hours against serious hardware; 16 characters survives longer than civilization.
