Password Entropy Calculator
Measure a password’s entropy, strength, and estimated crack time, see the character pool it draws on, and get suggestions to make it stronger.
Password
Local · not sentAnalysis
—About Password Entropy Calculator
The Password Entropy Calculator measures a password’s entropy and estimated crack time, shows the character pool it draws on, and suggests ways to strengthen it. It is for anyone wanting a numeric sense of how strong a password really is.
Entropy in bits is a more objective measure of strength than a vague rating. Calculating it locally gives that number with the password kept entirely private.
Step by step
- Type or paste the password to measure.
- Read its entropy in bits and the character pool it uses.
- Check the estimated crack time.
- Apply the suggestions to raise the entropy.
- Re-measure until it reaches a comfortable level.
What it offers
- Entropy measurement in bits
- Character-pool breakdown
- Estimated crack time
- Improvement suggestions
Where it helps
- Putting a number on how strong a password is
- Understanding how length raises entropy faster than symbols
- Comparing passphrases against random strings
- Teaching the maths behind password strength
Tips for best results
- Increase length first; each added character raises entropy more than swapping symbols.
- Aim well above the minimum, since estimates assume an attacker with fast hardware.
- Pair strong entropy with uniqueness — never reuse even a high-entropy password.
Pitfalls to watch for
- Assuming entropy alone guarantees safety; a high-entropy password reused everywhere is still risky.
- Padding with predictable sequences, which adds length but little real entropy.
- Reading the crack time as exact when it rests on assumptions about attacker speed.
Why people use it
Objective measure
Strength expressed as bits, not a label.
Shows the pool
See which character types you are actually using.
Actionable
Suggestions point to concrete improvements.
Private
The password is analysed locally.
Common questions
This runs entirely in your browser
No file or text you enter here is uploaded. Encoding and decoding happen on your device using native browser APIs — close the tab and nothing remains on a server.