Get an educational estimate based on length and character variety. Your password stays in your browser.
Analysed locally in your browser.
Educational estimate only. Real-world attack time depends heavily on hashing, rate limits, hardware and attack method.
The chart below is a visual comparison, not a guarantee of real-world crack times.
| Length | Numbers | Lowercase | Upper + Lower | Letters + Numbers | Letters + Numbers + Symbols |
|---|---|---|---|---|---|
| 6 | Very weak | Very weak | Weak | Weak | Moderate |
| 8 | Very weak | Weak | Moderate | Moderate | Strong |
| 10 | Weak | Moderate | Strong | Strong | Very strong |
| 12+ | Moderate | Strong | Very strong | Very strong | Excellent margin |
Longer passwords create more possible combinations.
Unpredictable credentials resist guessing better than familiar patterns.
Different character sets can increase the search space.
The way a service stores passwords can dramatically change attack difficulty.