🛡️
Password Entropy & Brute-Force Estimator
SecurityMeasure password strength with charset analysis, entropy bits, and estimated crack times across online and offline attack models. 100% client-side.
Client-side
Password input
Length0
Entropy & brute-force estimator
Measure charset diversity, entropy bits, and estimated crack time across online and offline attack models — 100% client-side.
Entropy—
Very weak
Charset pool—
Combinations1
Strength15/100
No character classes detected yet.
| Attack model | Guesses / sec | Est. crack time | Notes |
|---|---|---|---|
| Online throttled | 10 | Under 1 second | Typical login rate limit |
| Online unthrottled | 1,000 | Instant | Weak API auth endpoint |
| Offline slow hash | 10,000 | Instant | Bcrypt / Argon2 class |
| Offline fast GPU | 10,000,000,000 | Instant | MD5 / SHA-1 class |
| Distributed attack | 100,000,000,000 | Instant | Large botnet / cluster |
Enter a password
Entropy and crack-time estimates update live as you type.
Crack-time estimates are educational models only. Real-world risk also depends on hashing algorithm, salting, MFA, breach reuse, and site-specific rate limits.