What does this tool do?
The Password Strength tool analyzes the password you type in real time, reporting its length, character-set size, bits of entropy and a score out of 9. It also shows estimated crack times for online and offline attacks, making it useful for anyone curious about how resilient their passwords really are.
How to use it
- Choose the required options or length.
- Generate the secure result.
- Copy and store the result safely.
How the crack-time estimates work
The tool first determines the character-set size from the character types you use (lowercase, uppercase, digits, special characters), then computes the number of possible combinations. It divides that count by two attack speeds: 10 billion guesses per second for online attacks and 10 trillion per second for offline attacks. The result is shown as a readable span ranging from instantly to centuries.
The checklist and scoring
An eight-item checklist covers the 8, 12 and 16 character thresholds, the presence of lowercase, uppercase, digits and special characters, and whether your password contains a common one such as password, 123456 or qwerty. The score is calculated out of 9 from these criteria plus a bonus for 20+ characters, and is color-coded as Weak, Fair, Good or Strong.
Frequently asked questions
What does the entropy value mean?
Entropy is a measure in bits of all possible variations of your password, computed as the log2 of the character-set size raised to the password length. More bits means it is harder to guess by brute force.
Why are the two crack times different?
The online attack assumes a rate-limited login form at 10 billion guesses per second, while the offline attack assumes a stolen database at 10 trillion per second. That is why the offline time is much shorter.
What does the common-password check scan for?
It looks for frequently used sequences like password, 123456, qwerty, letmein and admin. If your password contains any of them, this check fails and your score drops.
Is Password Strength free?
Yes. Password Strength and all 300+ tools on MagmaNex are completely free with no signup or account required.
Is my data safe?
Yes. Everything runs locally in your browser. The data you enter is never sent to a server, stored, or shared.
Does it work on mobile?
Yes. Password Strength works on phones, tablets and desktops — no app download needed.
🔒 Privacy: everything runs in your browser, your data is never sent to a server.