Type a password to see how strong it really is — with specific fixes for what's weakening it. This runs 100% in your browser: nothing you type is saved, sent, or seen by anyone, including us. (You can even load this page and turn off your internet to verify.)
Estimates are approximate and assume an offline attack on a leaked database — the worst-case scenario worth planning for.
What actually makes a password strong
Length beats cleverness: “correct-horse-battery-staple” style passphrases outlast “P@ssw0rd!” every time, because attackers try clever substitutions first. The full method — including how to make passwords you’ll actually remember, and why reuse is the real killer — is in our strong password guide.
Golden rule pairing: a strong password only protects you if it only lives on the official site — the password rule explains where it should never go.