Password Strength Analyser
What is a Password Strength Analyser?
Analyze password strength, calculate exact Shannon entropy bits, detect dictionary pattern weaknesses, and estimate offline brute-force crack times against fast GPU cracking hardware.
Why Use This Tool?
- Password Security Auditing: Test your personal or corporate passwords for vulnerability to dictionary and brute-force attacks.
- Understand Password Crack Times: See how adding length and special characters drastically increases brute-force time from seconds to centuries.
- Pattern Weakness Detection: Detect weak repetitive patterns, keyboard walks (`qwerty`), and common substitutions (`p@ssword`).
How to Use
- Enter password into the analyzer field.
- View real-time Entropy Score (Bits), Quality Score (Weak, Fair, Strong, Very Strong), and Estimated Crack Time.
- Inspect detected pattern warnings and improvement suggestions.
Real Working Example
Input:
Password: "CorrectHorseBatteryStaple#2026"
Output Result:
Entropy: 124 Bits | Score: VERY STRONG (100/100) Estimated Offline GPU Crack Time: 4.2 Trillion Years Pattern Warnings: None (High Entropy Passphrase)
Important Technical Details & Security Standards
- zxcvbn Password Strength Engine: Uses Dropbox zxcvbn pattern matching library for realistic entropy estimation.
- Multi-Scenario Crack Time Estimation: Estimates crack times for online throttling (100/hr), online fast (10/sec), and offline GPU hashing (10^10/sec).
- 100% Local Privacy: Passwords are typed directly into client memory—zero keystrokes are transmitted to servers.
Related Security & Crypto Tools
- Diceware Passphrase Generator: Generate high-entropy passphrases.
- Token Generator: Generate secure random tokens.
- Bcrypt Generator: Hash passwords with Bcrypt.
Frequently Asked Questions
Is it safe to test my real password here?
Yes, this tool runs 100% locally in your browser memory; no password data ever leaves your device.
Why is password length more important than complexity?
Exponential math dictates that increasing length adds far more entropy combinations than adding special symbols to short passwords.
What is a good entropy score in bits?
Passwords with 60+ bits are strong; 80+ bits are virtually uncrackable; 100+ bits offer military-grade security.
Is it free?
Yes, 100% free.
What is zxcvbn entropy modeling?
zxcvbn models real-world password cracking by identifying dictionary words, names, dates, keyboard patterns, and leetspeak substitutions.
What is an offline GPU cracking attack?
Offline GPU cracking occurs when an attacker obtains a database hash dump and uses high-speed graphics cards to test billions of guesses per second.