Password Strength Checker

Find out how strong a password really is — it's checked on your device and never sent anywhere.

—Strength
—Estimated entropy
—Online attack (100 guesses/hour)
—Offline attack, fast hash (10 billion/s)
—Offline attack, slow hash (10,000/s)
—Length

● 🔒 Your password is analyzed only in your browser. It is never stored, logged or sent anywhere.

How it works

Simple rules like “one uppercase and one symbol” say little about real strength. Attackers try common passwords, dictionary words with substitutions (p@ssw0rd), keyboard patterns (qwerty, 123456), dates and repeated characters first. KadiTools looks for these patterns, estimates how many guesses an attacker would need, and converts that into time for three attack scenarios.

The best passwords are long and random: a passphrase of four or five random words, or 16+ random characters from a password manager.

FAQ

Is it safe to type my real password here?

The check runs entirely in your browser and nothing is sent. Still, as a habit, prefer testing a similar password rather than the exact one.