How secure is
your password?
Generate strong credentials or test the one you already use. Everything runs locally in your browser - no network calls, no logging, no storage.
Options
How it works
- Passwords are never stored or transmitted.
- All checking happens locally in your browser.
- You can test offline - no internet required.
- We check against common password patterns.
- We analyse keyboard patterns and sequences.
- We detect common substitutions (e.g.
a → @).
Strong password tips
- Use at least 14 characters.
- Mix uppercase and lowercase letters.
- Include numbers and special characters.
- Avoid personal information.
- Don't use dictionary words alone.
- Use unique passwords for each account.
- Consider a password manager.
- Enable two-factor authentication.
Common password mistakes to avoid.
Easy passwords
Using simple, predictable passwords makes accounts vulnerable to dictionary & brute-force attacks.
Reusing passwords
Using the same password across accounts means one breach compromises all of them.
Never changing
Keeping the same password for years increases the chance of eventual compromise.
Sharing insecurely
Sending passwords through email, SMS or chat leaves a permanent unencrypted record.
Writing them down
Storing passwords in spreadsheets, sticky notes or phone notes is unsafe and easy to lose.
Skipping MFA
Not enabling Multi-Factor Authentication is the single biggest avoidable risk.
Letting browsers save
Relying on browser password storage without a master password or device encryption.
Predictable patterns
Keyboard walks (qwerty, 12345), birthdays, and dictionary words are tried first by attackers.