How the checker works
The tool looks at length, the mix of characters, common passwords, repeated characters and simple sequences, then estimates how long a fast offline attack might take. Everything runs on your device. Nothing is sent, saved or logged.
What makes a password strong
- Length matters most. Aim for 14 characters or more.
- Use a different password for every account.
- Let a password manager create and store them.
- Turn on two-factor authentication wherever it is offered.
The check happens inside your browser and nothing is transmitted. Even so, a good habit is to test a similar password instead of your real one. Each extra character multiplies the number of guesses an attacker needs.Is it safe to type my real password here?
Why does a long password score higher?
