Password Strength Checker | Local Crack Time Test

Test password strength and estimated crack time with zxcvbn. The check runs locally in your browser, so your input is not uploaded.

Click for theater mode
Local check ยท works offline

Passwords are not uploaded. After the page loads, you can disconnect before testing.

Type a password or load an example to see the zxcvbn score, crack time, and suggestions.

How to Use

  1. After the page loads, disconnect your device from the network if you want extra peace of mind.
  2. Click "Load Weak Example" or "Load Strong Example" to see how the score changes.
  3. Type the password you want to evaluate, or use a similar pattern instead of the exact real password.
  4. Review crack time, score bar, warnings, and suggestions.
  5. Improve length, randomness, or phrase structure based on the feedback.

Core Features

  • zxcvbn-based scoring: The tool checks more than length, including common words, keyboard patterns, repetition, and dates.
  • Works after the page loads: The algorithm and dictionaries run in the front end, so you can disconnect before testing a sample password.
  • Readable crack time: See an offline slow-hashing crack time estimate with a clear risk score bar.
  • Real-time weakness feedback: Warnings and suggestions update as you type so you can improve the password structure.
  • Safer examples included: Load weak and strong sample passwords before deciding whether to test a same-pattern substitute.

Related Tools

FIRE Calculator 2026 (Inflation Adjusted) | Retirement Gap Simulator

The 2026 FIRE Calculator (Inflation Adjusted). Simulate real purchasing power, analyze retirement savings gaps, and generate a visual wealth roadmap. One-click CSV export for your Excel or Notion finance dashboard. 100% Private, client-side calculation.

Position Size Calculator - Risk-Based Trade Sizing

Calculate trade position size from account balance, risk %, entry, and stop loss. Runs locally in your browser with no uploads, so you can compare risk scenarios before you trade.

Compound Interest Calculator | Free APY & Investment Chart

Calculate compound interest from principal, recurring contributions, APY, and time. Visualize principal, interest, and final balance with a local interactive chart.

PUBG Erangel Interactive Map 2026: Secret Basements & Loot Guide

Struggling to find Erangel secret rooms? Use our 2026 interactive map to locate all 15 red-door entries, key spawns, and T3 loot heatmaps. Privacy-first & free.

PUBG Taego Secret Room Map 2026: Key Spawn & Hidden Locations

Definitive Taego map for 2026. With Error Spaces removed, identify "Blue-Roof" houses for crate-tier loot and Self-AEDs. Privacy-first, forever free.

PUBG Vikendi Map 2026: Bear Caves, Lab Camps & Secret Loot

Vikendi 2026 tactical guide. Track deadly Bear Cave entrances, Lab Camp security keys, and Thermal Scope spawn zones. Avoid Polar Bears, grab loot.

PUBG Rondo Interactive Map 2026: Security Keys & Safes Guide

Master Rondo 2026 with our 8x8 tactical map. Locate every Security Door, Keycard spawn, and Safe for maximum gold. Privacy-first & free.

Universal Image Stamper Pro: SVG & WebP Support, Lossless Annotation 2026

Struggling with blurry markups? EasyTools offers a universal stamper supporting lossless SVG scaling and high-quality WebP export. Preserve transparency and export JSON data locally.

Calculation Logic

This tool uses Dropbox's open-source zxcvbn password strength estimator. It estimates how many guesses an attacker would need, then translates that into a readable crack time for an offline slow-hashing attack scenario.

The check runs in the browser and does not send input to a backend. As a good security habit, prefer testing a same-pattern substitute instead of your exact real password.

FAQ

Is it safe to type my real password?

The tool does not upload your input, but the safer habit is to test a same-pattern substitute rather than the exact real password, especially on shared devices.

How is crack time calculated?

zxcvbn estimates guesses from dictionaries, keyboard patterns, repetition, dates, and composition, then converts the guesses into time.

Why can a long password still be weak?

If it is built from common phrases, sequences, or known patterns, attackers may guess those patterns early, reducing the benefit of length.

Does it work offline?

After the page loads, the evaluation logic runs locally in the browser, so you can disconnect and keep testing.

Does a high score mean the password cannot be cracked?

No. A high score means the pattern is harder to guess and more expensive to attack. It does not guarantee permanent safety or replace a password manager and two-factor authentication.