Enter a Password to Analyze
—
Crack Time Estimator • Pattern Detection • 100% Local, Never Transmitted
This tool estimates how long it would realistically take to crack a password, rather than just measuring its raw length or character variety. A long password can still be weak if it's a known common password, a keyboard pattern (like qwerty or asdfgh), a sequential run of characters (like abc or 123), or a repeated character run (like aaa) — attackers try these patterns first, long before brute-forcing every possible combination. This tool checks for those patterns and reduces the estimated strength accordingly, rather than reporting an overly optimistic number based on length alone.
The four crack-time estimates reflect different real-world attack conditions: a rate-limited login form (very slow), an online service without abuse protection, an offline attack against a leaked database protected by a slow hash like bcrypt, and an offline attack against a leaked database protected by a fast hash like MD5 using modern GPU hardware. These are approximations based on commonly cited guessing-speed benchmarks, not precise guarantees — actual crack time depends heavily on the specific attacker's hardware and the exact hash algorithm used to store the password.
Your password is never transmitted anywhere. Everything here runs locally in your browser tab using JavaScript; nothing is logged, stored, or sent to any server.