One account. One password.
Never reuse a password—even a highly rated one. A leak at one service can expose every account that shares it.
All IT Tools
Password Strength Tester
Explore guessable patterns with a local password-strength estimator.
Focus on this tool.
Check a password pattern
Use a made-up example—not a real school, banking or work password. Browser extensions and the device itself can still see what you type.
Up to 128 characters. Checked only on this device; no breach-search service is contacted.
Demo examples are public. Never use them for an actual account.
Local estimate
GUESSABILITY, NOT A SECURITY CERTIFICATE
How predictable is it?
Test a fictional example. Then protect the account with unique credentials and MFA.
Enter a fictional password to see feedback.
What this result can’t tell you
It cannot know whether this password was leaked, reused or observed. English-language dictionaries are only a subset of human language. Choose long, unique, randomly generated passwords and use MFA.
Estimator: zxcvbn-ts, loaded locally under its MIT license.
A stronger password is only one layer
Let a manager remember it
Use a trusted password manager for long, random, unique passwords. For a memorized passphrase, use several unrelated words—not a quotation or personal details.
Turn on MFA or a passkey
Enable multi-factor authentication (MFA). Prefer a passkey or security key when offered for phishing-resistant sign-in; otherwise use the strongest MFA option available.
Protect recovery, too
Keep recovery codes somewhere private. Never share verification codes or approve an unexpected sign-in request. Replace exposed passwords and follow your school or workplace policy.
A high score does not make reuse safe. This page cannot inspect your accounts, turn on MFA, detect every compromised password or guarantee protection.
Guidance: FBI online safety · CISA account-security guidance · NIST authenticator guidance.
Calculated in your browser. Inputs and files aren’t uploaded or saved. Tool sources & licenses