Calc Hub

Password Strength Calculator

Estimate password entropy, rough online and offline cracking windows, and whether common patterns are weakening the password more than the character mix suggests.

Last updated: 2026-03-26

Password strength calculator

Enter your values

Estimate entropy and rough cracking windows locally in your browser. This page keeps password history disabled.

Runs in your browser. This calculator does not keep password history on the page.

All required fields must be filled in.

Estimated Strength

--

Enter a password or passphrase to estimate rough entropy, pattern penalties, and online vs offline crack-time windows.

Example calculations

Tap an example to prefill the calculator with sample values.

Common seasonal pattern

Short mixed password with a predictable word and year

A password can use uppercase, digits, and a symbol but still be easy to guess if it follows a common pattern.

Result: Usually lands in the fair range, not strong.

Long passphrase

Multi-word phrase with digits and punctuation

Longer passphrases often outperform short random-looking passwords because length compounds the search space quickly.

Result: Typically produces a strong or very strong estimate.

Mixed random string

Longer mixed-character password without an obvious pattern

A high-entropy password can be strong without being a full passphrase if it avoids predictable themes and reuse.

Result: Usually produces a strong estimate with much better offline resistance.

How the password estimate works

The estimator starts with a rough entropy model based on password length and the character pools you use: lowercase, uppercase, digits, and symbols. It then subtracts penalty bits when the string looks more predictable than the raw character mix implies.

Those penalties are intentionally heuristic. Real password safety also depends on uniqueness, breach history, password-manager use, MFA, and whether an attacker has access to an offline hash rather than a rate-limited login form.

Password strength FAQs

Why length matters so much, and why a good score still does not replace uniqueness or MFA.

Does this check whether my password has appeared in a breach?

No. It is a local heuristic estimator, not a breach-lookup service. A password can score well mathematically and still be unsafe if it has already been exposed or reused elsewhere.

Why can a long passphrase beat a shorter mixed password?

Because length multiplies the search space very quickly. Even when a passphrase uses a simpler character mix, extra characters can outweigh the benefit of adding one more symbol to a short password.

Why show both online and offline crack times?

Rate-limited online guessing and offline hash cracking are very different attack conditions. A password that survives normal website lockouts may still be weak if an attacker gets a hash and can guess at much higher speed.

Embed this calculator

Copy the code below to embed this calculator on your website or blog. It's free — no API key needed.

<iframe
  src="https://calc.mintloop.dev/embed/daily/password-strength-calculator"
  width="100%"
  height="600"
  frameborder="0"
  title="Password Strength Calculator"
  loading="lazy">
</iframe>
Optional: auto-resize script
<script>
var CALC_HUB_ORIGIN = 'https://calc.mintloop.dev';
window.addEventListener('message', function(e) {
  if (e.origin !== CALC_HUB_ORIGIN) return;
  if (!e.data || e.data.type !== 'calc-hub-resize') return;
  var frames = document.querySelectorAll('iframe[src*="calc.mintloop.dev"]');
  frames.forEach(function(f) {
    if (f.contentWindow === e.source) {
      f.style.height = String(Math.max(0, Number(e.data.height) || 0)) + 'px';
    }
  });
});
</script>

Pair password hygiene with adjacent risk and home-security planning tools.

Get more practical security-planning calculators

Join the Calc Hub newsletter for new calculators covering digital safety, remote work, and everyday decision-making.

Join the Calc Hub newsletter

Was this calculator helpful?

Your feedback helps us improve future calculators.