Credentials & storage

Password strength tester

A private, browser-only password assessment tool for users and application developers.

Passwords, imported word lists, and hashes never leave this browser and are never stored.

Evaluate a password

Password to assess

Enter a password to begin

0 characters · 0 character types

Show common-pattern feedback

Add a common-password list

One password per line. Up to 2 MB. Built-in dictionary matching is already part of the strength estimate.

Generate a random-salted PBKDF2 hash or inspect an existing storage format. This is a developer test, not an account password store.

Hashing algorithm

Inspect or verify a stored hash

Use a long, unique passphrase or a password manager’s random password. Reusing a strong password still puts every account at risk.

Strength is estimated with local dictionary and pattern matching, not just character counts.

Prefer Argon2id in a vetted server-side password library. This browser lab generates PBKDF2 using Web Crypto.

Always use a unique random salt. Keep work parameters with the hash and adjust cost to your infrastructure.

Do not use MD5, SHA-1, or unsalted SHA-256 for password storage. Never log plaintext passwords.