Password Strength Checker

Check password length and common weak patterns privately in your browser.

100% private — your password is analysed entirely in your browser and is never sent, stored, or logged.

Generate a new password

Local pattern check only. No breach database lookup or cracking-time prediction. The example is public and should not be used for an account.

Enter a password
— Characters
— Patterns detected
  • At least 15 characters
  • No common password or obvious variant detected
  • No repeated character or block detected
  • No simple sequence detected

    Free online password strength checker

    Check your password for common weak patterns without sending it anywhere. The checker counts Unicode characters, looks for common passwords and obvious variants, detects repeated blocks and simple sequences, and gives concrete improvement tips. Results update as you type, and your password stays on this page.

    How to check your password strength

    1. Type or paste a password into the field. Use Show and Hide to control visibility.
    2. Read the result and the specific patterns detected.
    3. Use the improvement tips, or try the public weak example to see how the checks work.
    4. Choose Clear password when finished to erase the input, hide it, and reset the results.

    What the result means

    A longer password can still be predictable: Password123! follows a common pattern, and abcabcabcabc repeats the same block. "No obvious pattern found" means this limited set of checks did not find a weakness. It does not mean the password is unique, has not been leaked, or will withstand every attack. This tool does not calculate entropy or a cracking time.

    Length, uniqueness, and practical protection

    NIST's password guidance sets a 15-character minimum for passwords used as the only authentication factor, without requiring a particular mix of uppercase letters, digits, or symbols. A password manager can create and store unique passwords for each account. For memorable passphrases, use randomly chosen words, avoiding famous phrases or personal information. Enable multi-factor authentication where available. Need a new candidate? Use the password generator.

    Frequently asked questions

    How does this password strength checker work?

    It checks password length, a small local list of common passwords and obvious variants, repeated characters or blocks, and simple keyboard, alphabet, or number sequences. It explains the patterns it finds. This is a limited pattern check, not a complete measure of unpredictability or proof that a password is secure.

    Is my password sent to a server or stored anywhere?

    No. The checker runs locally in your browser. The entered password is not uploaded, stored, or logged. Use Clear password to erase the field and its results; it also hides the password again.

    Does it check leaked passwords or estimate cracking time?

    No. It does not contact breach databases or estimate how long a password would take to crack. Real guessing resistance depends on how the password was chosen, the attack, and how the account stores and protects passwords. A result of "No obvious pattern found" only means these local checks did not find one.

    Why can adding numbers or symbols still leave a password weak?

    Predictable changes such as Password123! or passw0rd2026! can still resemble common passwords. Repeating a short block also adds length without much unpredictability. Choose an unrelated password rather than modifying a known weak one.

    Do I need uppercase, numbers, and symbols?

    Those character types are not separate pass-or-fail requirements here. Length and avoiding obvious patterns matter more than checking off character types. NIST recommends at least 15 characters for passwords used as the only authentication factor. Use a password manager to create and keep a unique password for each account, and enable multi-factor authentication where available.