Cracking Estimation
Warning
-
Complexity Criteria
Generate High-Strength Password
Security & FAQ
Is this tool safe to test actual passwords?
Yes. All evaluation logic runs directly in your local browser sandbox. The password text is analyzed client-side using JavaScript. It is never stored, tracked, or sent to any server.
What is entropy in password strength?
Entropy measures the unpredictability of a password in bits. Higher entropy means a larger number of guesses are needed to brute force it. `zxcvbn` estimates entropy based on common patterns, dictionary lookups, keyboard patterns, dates, and names, rather than just simple length.
Why are custom rules alone not enough?
A password like P@ssword1! meets all criteria checks (length, uppercase, symbol, number) but is extremely weak because it uses common dictionary terms and substitutions. That is why entropy checks like `zxcvbn` are the modern standard.