Rate My Password
Type a password to see its length, character mix, entropy and an estimated time to crack, updated as you type and never sent anywhere.
- Runs in your browser
- Free to use
About this tool
Rate My Password gives an honest strength estimate for any password you type: it counts the characters by class, derives the entropy from the resulting pool and length, applies penalties for repetition, keyboard sequences and famous passwords, and translates the result into a rating and an estimated time to crack assuming a fast offline attack. All of it happens in your browser.
Need a new one? The Password Generator builds strong passwords with the same meter.
How to use it — quick steps
- 01
Type the password
Enter it in the masked field above; the rating updates on every keystroke and stays on your device.
- 02
Read the characteristics
Length and the number of lowercase, uppercase, digits, symbols and other characters are shown in boxes.
- 03
Check the strength
The meter shows the entropy estimate, a rating from weak to very strong and the estimated crack time.
Key features of this tool
Real-time rating
Every keystroke updates the counts, the entropy estimate and the time-to-crack figure, with no button to press.
Stays on your device
The password is analysed by JavaScript in your browser and is never transmitted, logged or stored anywhere.
Pattern warnings
Common passwords, keyboard sequences, heavy repetition and single-class passwords are flagged and lower the score.
Frequently asked questions
How is the strength calculated?
From the size of the character pool (which classes you use) and the length, giving an entropy estimate in bits; repetition, sequences and well-known passwords reduce it. It is an estimate, not a guarantee.
Is it safe to type a real password here?
The rating runs entirely in your browser and the page makes no request with the value, but as a rule prefer checking a candidate rather than a password you already use for an important account.
What rating should I aim for?
At least "strong" (around 80 bits) for everyday accounts and "very strong" for e-mail, banking and password-manager master passwords. Length is the easiest way to get there.
Why is a long password rated weak?
Because it is made of one character class, repeats characters, follows a keyboard sequence or starts with a very common password. Mix classes and avoid patterns.