01 / Password Strength Checker

How strong is your password?

Type or paste a password to see entropy, estimated crack time, and whether it hits a common leaked-password list. Everything runs in this tab. The password is never uploaded. This is a local strength check—not a Have I Been Pwned lookup.

Never uploaded Entropy + crack time Common leaked list

Updates as you type, with a grade in about 0.3 seconds. Nothing is written to local storage or sent to the server.

Loading the weak-password list…

Grade, entropy, and crack time appear as you type

Nothing to score yet. After you type, you will see Weak / Medium / Strong / Very strong, plus whether it hits the public leaked-password list.

02 / What it checks

What this checker covers — and what it does not

Entropy, weak patterns, and list matching all finish in the current tab. The password is not put in an HTTP request and is not written to analytics.

Where it runs 01 The current tab runs the local audit. Plaintext is not sent to UsePwd and is not written to analytics.
Grade thresholds 02 80 / 60 / 40 bits. Too short or a common weak password is forced to Weak.
List scope 03 Checks a public high-frequency leaked-password list, not a web-wide dump set.
Not a web-wide lookup 04 A miss does not prove it was never leaked. This page does not query Have I Been Pwned.
03 / FAQ

Before you test a password

No. Entropy estimates, weak-pattern checks, and list matching all finish in the current tab. The password is not sent as an HTTP request and is not written to analytics. After you close the page, the server has no copy of this input.

Is the password uploaded? 01 No. Computation stays in the current tab. Plaintext is not written to the server.
Was this password leaked? 02 It only checks a public high-frequency weak-password list, not a web-wide dump.
Is crack time accurate 03 It compares relative strength. It is not an exact countdown.
How do I replace a weak password 04 Create a new one locally in the Password Generator. Do not reuse the old secret.
How is this different from a leak lookup 05 This page only tests strength locally. It does not send a password or hash to an external API.
Do I need an account? 06 No sign-up. Results are not saved, and there is no vault.
04 / Next

After the audit

Replace a weak password. Generation, one-time sharing, and file backup all stay in the browser. Plaintext, keys, and files are not uploaded by default.

Password Generator 01 Burn-Link 02 File Encryption Box 03