Your files stay on your device

Password strength checker

Score a password with zxcvbn, Dropbox's guessing model, and see exactly which dictionary words, repeats, or patterns an attacker would play first. The dictionaries load on first run; the password never leaves the tab.
Password to scoreScore passwordPersonal words

Fed to the model as user-input dictionary entries: they demote passwords built from them. Kept in memory only.

- No breach-database check: that needs a third-party k-anonymity request (rejected by plan); zxcvbn knows common passwords from its bundled list only.
- The password lives in this tab’s memory while you type. Nothing is sent or stored, and a browser tab cannot guarantee the memory is zeroized after.
- A strong score on this page does not make a password right for your site. Length, uniqueness per site, and how you store it matter more.
Paste, drop, or type to begin. Everything stays on this device.

More hashing & encryption tools

- Password generator (/generate/password-generator)
- bcrypt (/crypto/bcrypt)
All hashing & encryption tools (/crypto)

Canonical HTML: https://nutter.tools/crypto/password-strength/
Markdown version: https://nutter.tools/crypto/password-strength/index.md
Plain-text version: https://nutter.tools/crypto/password-strength/index.txt
Agent index: https://nutter.tools/llms.txt