Check password strength

No. The rating runs in your browser. There is no form that is submitted, no request to a server and no storage. Still: avoid typing your real password anywhere – check a similarly built one instead.

Length and the kinds of characters used give a number in bits. From that we subtract what attackers try first: repetitions such as "aaa", sequences such as "123" or "qwerty" and very common words, also with @ or 0. Passphrases made of several words are rated per word, not per letter.

Below 28 bits: very weak, below 40: weak, below 60: fair, below 80: strong, from 80: very strong. Important accounts such as email or banking should be at least "strong".

Not necessarily. The estimate cannot see whether the password has appeared in a data breach or whether you use it for several accounts. Both make even a long password unsafe.

The easiest way is to have one generated – for example with our free password generator – and keep it in a password manager. Then you can have a different one for every account without remembering them all.