100% private — this matters
Everything on this page runs locally in your browser. The password you type is never transmitted, logged, or stored anywhere. You can even load the page and disconnect from the internet before testing.
How "time to crack" is estimated
We calculate entropy from your password's length and character variety, then assume an attacker testing 10 billion guesses per second (a realistic offline attack). It's an estimate — real strength also depends on whether the password appears in leaked databases, which is why unique random passwords always win.