Password strength checker
This tool uses zxcvbn, the same realistic password-strength estimator used by Dropbox and many other services. It checks against real breached-password lists, dictionary words, keyboard patterns, dates, and common substitutions (a→@, s→5, o→0) — not just "does it have a capital letter and a number".
Enter a password above to check it.
Why "Fair" or "Good" can still be dangerous: a password can pass simple rules (12+ characters, a capital letter, a digit) and still be one of the first things an attacker tries. Password1, P@ssword1, and pa55word all satisfy typical complexity rules — and all get guessed in under a second, because attackers test common words with predictable substitutions very early in any real attack.
Consider using a long, unique passphrase made from several unrelated words instead — see the password generator's passphrase mode.