Skip to content
Work data is processed in your browser, not stored on our servers.
tools
Password Strength & Crack-Time Estimator

Password Strength & Crack-Time Estimator

Use zxcvbn to review a pattern-aware password score, estimated crack times, warnings, and improvement suggestions in your browser.

Focus mode
Enter a password
The entered password is analyzed only in your browser and is not sent to a server.

Enter a password to see its estimated strength.

Analysis runs only in this browser. The entered value is not stored or transmitted.

Key features

  • Uses zxcvbn to score passwords from 0 to 4 with dictionary words, repeats, sequences, and common patterns in mind.
  • Shows estimated times for throttled online attacks and fast or slow offline-hash scenarios.
  • Provides pattern-specific warnings and suggestions.
  • Can reveal or mask the entry and analyzes it after a 200 ms debounce.

How to use

  1. Enter the password you want to assess.
  2. Review the score and estimated time for each attack scenario.
  3. Apply relevant warnings or suggestions and compare the revised password.

Examples

  • Compare password candidates

    Compare scores, warnings, and improvement suggestions for several candidates.

  • Explain a password policy

    Show how common patterns reduce strength alongside estimated crack times.

Privacy

Zxcvbn analysis runs in your browser, and the entry is not sent to QuickKit servers or storage.

Requirements

Scores and crack times are model-based estimates, not guarantees that a password is safe or resistant to a real breach.

Common questions

Is the score based only on password length?
No. Zxcvbn considers dictionary words, repetitions, sequences, and common patterns when assigning a score from 0 to 4.
Is the crack time an actual prediction?
No. It is an estimate under several online and offline attack assumptions and can differ greatly from real conditions.

Related tools