Free tool
Password strength checker
See how long a password would take to guess and the patterns that weaken it. You do not need your real password; try one built the same way.
You do not need to type your real password: try one built the same way. Nothing you type is sent anywhere.
What it looks for
Known patterns
Common passwords, common Turkish and English words, keyboard runs, repeats and years.
A realistic estimate
It does not just count character types; it discounts predictable parts and measures the randomness left.
Two scenarios
Guessing at a sign-in page one try at a time, against billions of tries a second on a leaked database.
Questions people ask
Is it safe to type my password here?
The test runs entirely in your browser and the page sends no requests. Still, as a good habit, never type a real password into any website; try one of the same length and structure.
Why are a capital letter and a symbol not enough?
Patterns like "Password2024!" are what attackers try first: a common word, a year and one symbol at the end. Length and real randomness matter more than looking complex.
How is the time to crack worked out?
From the estimated randomness (bits): on average a password is found after half the possibilities are tried. The sign-in scenario assumes 10 tries a second; the leak scenario 10 billion a second with a fast hash.
How are your team's passwords doing?
Passhield's password health report finds weak, reused and old passwords; the check runs only in your own browser.