Password Strength Checker
Password Strength & Breach Checker
Analyze patterns locally, estimate resistance to guessing, and optionally check known breaches without revealing your password.
Private local analysis
Test a password.
Your password stays here
Analysis is local. If you request a breach check, the browser sends only the first five characters of its SHA-1 hash to the Pwned Passwords range API.
How do I check password strength?
Enter a password to see a local estimate of its resistance to guessing. The checker looks for patterns and common words and suggests ways to improve the password.
Does a strong result mean my password is safe?
No. The result is an estimate, not a guarantee. A password can still be reused, stolen or exposed in a breach. Use a unique password for every account.
What is sent during a breach check?
Strength analysis stays on your device. If you choose to check known breaches, the tool sends only the first five characters of a SHA-1 hash to Pwned Passwords and compares the returned results locally. Your password and its complete hash are not sent.