Find out how secure your password really is. Test its strength, learn how long it would take to crack, and check if it's been exposed in past data breaches
We don't collect or store any entered passwords
This password strength checker rates a password as you type, estimates how long it would take to guess by brute force, and checks whether it has appeared in known data breaches. The scoring happens in your browser; the breach check uses a privacy-preserving lookup that never sends the password itself.
abc or 123, and keyboard patterns like qwer. It assumes an offline attack making 10 billion guesses per second.Summer2025!) falls much faster than its score suggests.The password is evaluated in your browser and not sent to PagesTest. For the breach check, only the first five characters of its SHA-1 hash leave your device, which can't be turned back into the password. If you'd rather be cautious, test a password of the same style instead of your real one.
Both. The rating measures length and variety; the breach check shows the exact password is already on lists attackers use. A breached password should be replaced regardless of its rating.
With a mix of upper- and lowercase letters, numbers and symbols there are roughly 6 quadrillion combinations. At 10 billion guesses per second, that is about a week to try them all, and much less if the password follows a common pattern. That is why 12 to 16 characters is now the recommended minimum.
Change it on every account where you used it, and use a different, randomly generated password for each one. Turn on two-factor authentication where available.