Password Analyzer
Estimate how long it would take an attacker to crack your password.
Estimated entropy: 0.0 bits · 0 characters
How long would it take to crack?
Online login with attempt limits
A site that locks the account after several failed attempts.
Unprotected online login
A service with no attempt limit or captcha.
Offline, slow hash (bcrypt / Argon2)
The database was leaked and the hash is well protected.
Offline, fast hash (SHA-256) with a GPU
A leaked hash without proper protection, attacked with a powerful GPU.
Offline, GPU cluster (MD5 / SHA-1)
An attack with a GPU cluster against a weak, unsalted hash.
Privacidad
How is this calculated?
We estimate the entropy of the password (how many different combinations an attacker would have to try) based on its length and the character types used, penalizing predictable patterns or common passwords. With that entropy we calculate, for each scenario, how long an average brute-force attack would take at the typical computing speed of current cracking hardware. It is an educational approximation: real times depend on the attacker's exact hardware and on whether your password was leaked in plain text some other way.