Free tool

How strong is this password?

Get a strength estimate and find out whether the password has already leaked in a data breach. The password itself never leaves your browser.

k-anonymity: only the first 5 characters of the password's SHA-1 hash are sent to Have I Been Pwned; it returns hundreds of possible matches and the comparison happens on your device. Nothing is stored.

Need a new one? Generate a passphrase

Four or five random words are easier to type on a phone and stronger than “Summer2024!”. Generated on your device with a cryptographic random source.

Prefer random characters?

Built and maintained by the Arventiq Labs team in Bengaluru. Free for anyone, source on GitHub (MIT). Results are indications, not verdicts. Something wrong? Tell us.