Most strength meters score whether you used a capital letter, and rate "Manchester2024!" as unbreakable. This one decomposes what you type the way a cracker does — un-doing letter-for-symbol swaps, matching the core against a dictionary of common words and names, and treating an appended year or trailing symbol as the cheap mangling rule it is — then converts the guess count into time-to-crack at modern offline hash rates. Nothing you type leaves your browser.
Runs entirely in your browser
Most strength meters just check boxes: did you use a capital, a number, a symbol? By that logic “Manchester2024!” looks unbreakable, when in fact a real attacker would guess it quickly. This checker instead decomposes what you type the way cracking software does — undoing letter-for-symbol swaps, matching the core against dictionaries of common words and names, and treating an appended year or a trailing symbol as the cheap, well-known mangling rule it is.
From that analysis it estimates the number of guesses required and converts it into a realistic time-to-crack at the hash rates modern offline attacks achieve. The result is far more honest than a coloured bar: a password can satisfy every “complexity requirement” and still fall in seconds if its structure is predictable, and this tool will tell you so.
Your input never leaves the browser — the entire analysis runs locally, so it is safe to test real passwords. Use it to understand why a password is weak, not just that it is, and let the reasoning guide you toward genuine length and randomness rather than superficial complexity.
TechToolsHQ is an independent, reader-supported tech platform. If this free tool saved you time, solved a problem, or helped your workflow, consider supporting our work. Your support helps us keep our utilities 100% free, private, and ad-free for everyone.