Is my password sent to your server?

No. The strength check runs entirely in your browser using JavaScript. We do not log, store, or transmit anything you type.

Why does the same password get a different score on different sites?

Most strength meters use simplistic rules ("must have a number"). We estimate entropy and pattern weakness, which more closely reflects how attackers actually crack passwords.

What's a good crack time?

For a password protecting a real account, aim for "centuries" or longer at offline-attack speed. Anything under "decades" should be replaced.

Password Strength Checker — Free tool on SafeCadence

Test a password

Privacy promise: this entire tool runs in your browser. The password you type is never sent over the network or written to disk.

Strength

—

Type a password above to see its score.

Length
0 characters

Charset size
0 possible chars

Entropy
0 bits

Crack-time assumes a modern offline GPU attacker (~10^11 guesses/sec). Online services with rate limits will take much longer to crack the same password.