Password Strength Checker

How This Test Works

This tool uses zxcvbn, an open-source password strength estimator originally developed at Dropbox. Unlike basic checkers that count uppercase/numbers/symbols, zxcvbn looks at real attack patterns: dictionary words, common substitutions (a → @, e → 3), keyboard sequences (qwerty), repeated patterns, dates, and known leaked passwords.

Your password is never transmitted. All calculations happen in your browser — there is no server-side processing and no logging.

What Makes a Strong Password

• Length over complexity — A 16-character passphrase like correct horse battery staple is exponentially stronger than an 8-character mess like P@ssw0rd!
• Avoid personal info — Birthdays, names, addresses, and pet names are easy targets for dictionary attacks
• Avoid common substitutions — Attackers know that "a" becomes "@" and "e" becomes "3". These add minimal real entropy.
• Use a unique password for every site — A breach at one site shouldn't compromise others
• Use a password manager — Tools like Bitwarden or 1Password generate and store unique passwords for every account

Combine Strong Passwords with a VPN

Strong passwords protect your accounts. A VPN protects your network connection. Together, they form the foundation of personal cybersecurity. If you connect to public Wi-Fi at coffee shops, airports, or hotels — even with strong passwords, your traffic can still be intercepted without encryption.

See our VPN reviews for 2026 for providers with clear privacy materials and modern encryption options.