Security Tools

Password Strength Checker

Check how strong a password is. Nothing is stored or logged.

  • Free to use
  • No sign-up

Working on it…

Running the tool — your results will appear here in a moment.

No results yet

Enter the details above and run the tool to see your results here.

Advertisement

About this tool

See how resistant a login secret is to guessing. The checker scores it from 0 to 100 based on length, character variety and common weak patterns, then explains what would make it stronger.

How to use it

  1. Type the candidate you want to test.
  2. Run the check.
  3. Read the score, the label and the improvement tips.

What affects the score

  • Length – longer is always better; 12+ characters is a sensible minimum.
  • Variety – upper and lower case, digits and symbols each add strength.
  • Patterns – repeated characters and sequences such as 1234 or abcd lower the score.
  • Common choices – entries like "123456" or "qwerty" are flagged immediately.

Score labels

Results range from Weak and Fair to Strong and Very Strong. Aim for at least Strong on important accounts such as email and banking.

Make it stronger

  • Use a passphrase of four or more unrelated words.
  • Never reuse the same one across sites.
  • Our Password Generator can create a random one for you.
  • Enable two-factor authentication for extra protection.

Good to know

A high score is an estimate, not a guarantee — even strong secrets can leak through phishing or data breaches. For safety, test a similar example rather than the exact one you use.

A worked example

Someone tests Summer2024! and gets a low score: it has upper and lower case, a number and a symbol, but it follows a common pattern of a season, a year and an exclamation mark. Changing it to a passphrase like cactus-violin-harbor-77 raises the score dramatically.

Patterns that weaken a secret

  • Names of pets, partners, children or sports teams
  • Years, birthdays and phone numbers
  • Keyboard walks such as qwerty or asdf
  • Simple substitutions like P@ssw0rd
  • Repeating the same word with a different number at the end

What attackers try first

Automated tools start with leaked lists of real secrets and common patterns, then add predictable twists. A long, random or truly unusual passphrase is far harder to reach.

Beyond strength

  1. Use a different one for every account.
  2. Turn on two-factor authentication.
  3. Check whether your email appears in public breaches on services such as Have I Been Pwned.

Related tools

Step by step: upgrading weak secrets

  1. List the accounts that matter most: email, banking, cloud storage and social media.
  2. Test a similar example of each current secret here.
  3. Replace anything scoring below Strong with a new generated one.
  4. Store the new ones in a password manager.

Start with your email account — it can reset almost every other account.

Frequently asked questions

From length, the mix of character types, repeated or sequential patterns, and a list of very common choices.
Length, variety and unpredictability — a long passphrase of unrelated words works well.
No. Even strong ones can be exposed through phishing, malware or breaches, so use two-factor authentication too.
It follows a common season-year-symbol pattern that attackers try early.
Change that secret everywhere you used it and enable two-factor authentication.
Your email, because it can be used to reset almost every other account.