How strong is your password
The check runs in your browser. The password goes nowhere — no request in the Network tab contains it.
- Entropy
- —
- Cracking would take
- —
What weakens this password
How this is calculated
Entropy is length times the log of the alphabet size, with penalties for the issues above. Cracking time assumes 10 billion guesses per second — how a leaked database is attacked, not a login form. This is an UPPER bound: it does not model dictionary attacks on real words, so actual strength can be lower than shown.
A password is half the protection
Even a strong password does not hide which sites you connect to. Your ISP and the network owner see that until the traffic is encrypted.
Try TainetThe password is processed in your browser only: it is sent nowhere, not stored and never enters history. The requests the site itself makes (analytics, the address lookup for the header) do not contain it.