Tests your password against the same dictionaries attackers use. Shows crack-time estimates for four attack scenarios and points out weak patterns.
We run your password through zxcvbn — a library that matches against the top 30k passwords, keyboard patterns, dictionary words, dates, and common substitutions like @ for a. The crack-time numbers assume a determined attacker, not a casual guesser.
No. Everything runs in your browser — the password never touches our servers, and we don't log anything you type here. The page is safe to use with real passwords.