// generator
Scroll down to the checker tool to test a password you already have in mind. It's scored using the same entropy math as our generator, plus detection for common weak passwords and patterns — and it never leaves your browser.
Create several passwords at once using the settings above — useful for provisioning multiple accounts.
Type any password to score it instantly. This runs entirely in your browser — nothing is sent anywhere, logged, or stored.
The checker runs entirely client-side — nothing is transmitted, logged, or stored, so it's safe to test a real password.
Entropy math alone can be fooled by things like 'password123' — this checker also flags common weak password patterns specifically.
If your current password checks out weak or reasonable, generate a stronger replacement above.
Yes — the check happens entirely in your browser using JavaScript. Nothing about what you type is sent to a server, logged, or stored anywhere.
Common patterns — dictionary words, keyboard walks like qwerty, repeated characters, or well-known weak passwords — are detected and penalized beyond raw character-count math.
60+ bits of entropy is a reasonable target for most accounts; 100+ bits for anything highly sensitive.
It evaluates structural strength — length, character variety, and predictable patterns — entirely in your browser; nothing is checked against or sent to an external database.
Password strength scales exponentially with length, not linearly — so even one additional character can meaningfully increase the total number of guesses an attacker would need to try.
It's a reasonable way to spot-check old passwords for obvious weaknesses, but for genuinely sensitive accounts, it's better to just generate a brand new strong password rather than patch up an old one.