Password Strength
Check length, character mix, common patterns, entropy, and a crack-time estimate.
Type a password to check it in this tab.
How it works
Type the password
The eye shows or hides it. Scoring updates as you type.
Read the meter
The bar comes from length, character mix, and pattern penalties. Entropy is bits of guesswork. Crack time assumes 10 billion guesses per second on a fast unsalted hash, not an online login.
Fix the weak spots
Meet the mix checks. Avoid common words, sequences, and keyboard walks. A long passphrase beats a short complex string. The score is a heuristic, not a leak check.
Why password meters disagree
A strength check estimates how many guesses an attacker would need. Tools disagree because they model different attackers and different password lists. This page scores from length, character mix, a short common-password list, sequences, and keyboard walks. It reports entropy and a crack-time estimate at 10 billion guesses per second. Easy24 does not receive the password.
Why use this tool
- Label, entropy, and a crack-time estimate
- Checks for 12+ characters, lower, upper, digit, and symbol
- Warnings for common passwords, repeats, sequences, and keyboard walks
- No account. Unlimited on the free plan
Questions
What does Password Strength do?
It estimates how hard a password is to guess. You get a label, entropy in bits, a crack-time estimate, mix checks, and warnings when the string looks like a common pattern.
How do I use Password Strength?
Type a password. Use the eye to show or hide it. Read the bar, the time to crack, and any warnings.
Why do other tools score the same password differently?
They do not share one formula. Some count character classes and length. Some (zxcvbn) look up dictionaries and l33t substitutions. Some add and subtract points for sequences. Crack time also depends on guesses per second: an online login (thousands per second) looks much slower to crack than an offline GPU (billions per second). Easy24 uses a local heuristic and 10 billion guesses per second for a fast unsalted hash. It is not zxcvbn and it does not query a leak database.
Does Easy24 receive the password?
No. Scoring runs in this tab. Easy24 does not send it to Have I Been Pwned or any other API.
What is entropy?
Entropy is a bit count of how many guesses a brute-force attacker would need if the password were random from its character set. Patterns, repeats, and common words cut that number. More bits is better. 60 bits is a decent floor for a random password; a passphrase of several words is usually stronger.
How is time to crack calculated?
Easy24 divides the guess space by 10 billion guesses per second, the order of a fast unsalted hash on a GPU. Salted slow hashes (Argon2, bcrypt) take far longer. An online form with lockouts takes longer still. The number is an illustration, not a promise.
Does a green bar mean the password is safe?
No. This page is not a leak check. A reused password can fail when another site is breached, even if the bar is green. Prefer a password manager and a unique passphrase. Turn on 2FA where you can.
Should I use a passphrase?
Yes, for accounts you type. Several random words beat Password123!. Use Password Generator or Passphrase Generator, then check the result here if you want.
Is there a daily limit?
No. There is no daily cap on this tool.
Do I need an account?
No. Open the page and use it.
Does it work on a phone?
Yes. It runs in the mobile browser.
If Easy24 helped, buy a coffee
Tools stay free in your browser. One-time thanks via Kreosus. Turkish cards work.
Similar Security tools
See allHash Generator
Security
MD5, SHA-1, SHA-256, SHA-384, or SHA-512 of UTF-8 text. Hex or Base64. Compare a known digest.
OpenHTTP Basic Auth
Security
Build or parse an Authorization: Basic header from a username and password.
OpenCaesar Cipher
Security
Shift Latin letters by a chosen amount. ROT13 is shift 13.
Open