Your files stay on your device

# Password strength checker

Score a password with zxcvbn, Dropbox's guessing model, and see exactly which dictionary words, repeats, or patterns an attacker would play first. The dictionaries load on first run; the password never leaves the tab.
Password to scoreScore passwordPersonal words

Fed to the model as user-input dictionary entries: they demote passwords built from them. Kept in memory only.

- No breach-database check: that needs a third-party k-anonymity request (rejected by plan); zxcvbn knows common passwords from its bundled list only.
- The password lives in this tab’s memory while you type. Nothing is sent or stored, and a browser tab cannot guarantee the memory is zeroized after.
- A strong score on this page does not make a password right for your site. Length, uniqueness per site, and how you store it matter more.
Paste, drop, or type to begin. Everything stays on this device.

## More hashing & encryption tools

- [Password generator](/generate/password-generator)
- [bcrypt](/crypto/bcrypt)
[All hashing & encryption tools](/crypto)

---

Canonical HTML: https://nutter.tools/crypto/password-strength/
Markdown version: https://nutter.tools/crypto/password-strength/index.md
Plain-text version: https://nutter.tools/crypto/password-strength/index.txt
Agent index: https://nutter.tools/llms.txt