Frequently Asked Questions
Is it safe to check my password here?
Yes, completely safe. All analysis is done using JavaScript running entirely in your browser. Your password is never sent to any server, never stored, and disappears when you close the tab.
What is password entropy?
Entropy measures how unpredictable a password is, in bits. Higher entropy = more secure. Entropy = log2(charset_size^length). A password with 60+ bits of entropy is considered strong against brute-force attacks.
What makes a password strong?
A strong password: is 12+ characters long (16+ is better), uses uppercase and lowercase letters, digits, and special symbols, is not a dictionary word or common pattern, is unique to each account, and is not based on personal information.
What is a crack time estimate?
Crack time estimates how long a computer would take to guess your password using brute-force. "Online attack" assumes a rate-limited web login (1000/s). "Offline fast hash" assumes a GPU cracking MD5 hashes (~10 billion/s).