Home Password strength
Password strength
Ten billion guesses a second is an example pace. The password is not saved.
Strength
Excellent
- Bits
- 92.0
- Example clock
- 15.5 billion years
- Length
- 12 or more
- Case
- Upper and lower
- Digit
- Has a digit
- Symbol
- Has a symbol
- Common
- Not common
- Sequence
- No sequence
Lower case counts as 26, upper case as 26, digits as 10, and every other character as a symbol pool of 33. Letters outside A–Z sit in that pool of 33. The published list is password, password1, 123456, 12345678, qwerty, abc123, letmein, welcome, admin, iloveyou, monkey, dragon, 111111, and 000000. A string of only 123, a qwerty, qwertz, or azerty prefix, asdf, zxcv, one character repeated, or four digits or more is a sequence. qwertz and azerty are this page’s extra keyboard walks. Ten billion guesses a second is an example pace, not a measured attack. The field stays in this browser and is not saved.
Why this exists
CorrectHorse1! is Excellent, 92.0 bits, and the example clock reads 15.5 billion years.
Lower case counts as 26, upper case as 26, digits as 10, and every other character as a symbol pool of 33. Letters outside A–Z sit in that pool of 33. The published list is password, password1, 123456, 12345678, qwerty, abc123, letmein, welcome, admin, iloveyou, monkey, dragon, 111111, and 000000. A string of only 123, a qwerty, qwertz, or azerty prefix, asdf, zxcv, one character repeated, or four digits or more is a sequence. qwertz and azerty are this page’s extra keyboard walks. Ten billion guesses a second is an example pace, not a measured attack. The field stays in this browser and is not saved.
-
01How to use it
CorrectHorse1! is Excellent, 92.0 bits, and the example clock reads 15.5 billion years.
Lower case counts as 26, upper case as 26, digits as 10, and every other character as a symbol pool of 33. Letters outside A–Z sit in that pool of 33. The published list is password, password1, 123456, 12345678, qwerty, abc123, letmein, welcome, admin, iloveyou, monkey, dragon, 111111, and 000000. A string of only 123, a qwerty, qwertz, or azerty prefix, asdf, zxcv, one character repeated, or four digits or more is a sequence. qwertz and azerty are this page’s extra keyboard walks. Ten billion guesses a second is an example pace, not a measured attack. The field stays in this browser and is not saved.
-
02What you get
Excellent.
15.5 billion years
EnteredCorrectHorse1!
Password CorrectHorse1! Strength Excellent Example clock 15.5 billion years -
03Worth knowing
Lower case counts as 26, upper case as 26, digits as 10, and every other character as a symbol pool of 33. Letters outside A–Z sit in that pool of 33. The published list is password, password1, 123456, 12345678, qwerty, abc123, letmein, welcome, admin, iloveyou, monkey, dragon, 111111, and 000000. A string of only 123, a qwerty, qwertz, or azerty prefix, asdf, zxcv, one character repeated, or four digits or more is a sequence. qwertz and azerty are this page’s extra keyboard walks. Ten billion guesses a second is an example pace, not a measured attack. The field stays in this browser and is not saved.
Ten billion guesses a second is an example pace. The password is not saved.
Questions
- QExcellent?
- AExcellent
- Q92.0?
- A92.0
- Q15.5 billion years?
- A15.5 billion years
How this page works it out
CorrectHorse1! is Excellent, 92.0 bits, and the example clock reads 15.5 billion years. Ten billion guesses a second is an example pace. The password is not saved.
The score adds one for 12 characters, one for upper and lower case, one for a digit, one for a symbol, and one when the entropy passes 60 bits. A common word sets it to 0, and a sequence subtracts one. Excellent is 4 or more.
Letters outside A–Z are not given a script size of their own. They sit in the symbol pool of 33. This page does not look up a breach list.