Test Your Password
Enter a password
Password Rules Checker
Generate Password
How Password Strength Is Measured
Entropy
Entropy measures the randomness of a password in bits. Higher entropy means more possible combinations an attacker must try. A password with 80+ bits of entropy is considered very strong.
Breach Check
Uses the HaveIBeenPwned k-anonymity API. Only the first 5 characters of the SHA-1 hash are sent - your full password never leaves your browser.
Pattern Detection
Detects common passwords, keyboard patterns (qwerty, asdf), sequential characters, repeated characters, l33t-speak substitutions, and date patterns.
Strength Levels
Frequently Asked Questions
What makes a strong password?
A strong password is at least 12 characters long, uses a mix of uppercase, lowercase, numbers, and symbols, and doesn't contain dictionary words or predictable patterns.
Is the HaveIBeenPwned check safe?
Yes. We use the k-anonymity model — only the first 5 characters of your password's SHA-1 hash are sent to the API. Your actual password never leaves your browser.
What is a passphrase?
A passphrase is a sequence of random words (like "correct-horse-battery-staple") that's easier to remember than random characters but can be equally strong due to its length.
Smarter quality checks. Faster deployments.
Better apps.
