Is the password checked against breach lists?

No. That would require sending it. This is an on-device entropy / class check.

Does a high score mean it is unused elsewhere?

No. Strength is not uniqueness. Do not reuse passwords across sites.

Where do I generate a better one?

Password Generator in this sandbox, using Web Crypto.

Why this tool stays in the browser

Score a candidate locally so you can see length and class coverage without posting the password to a strength or HIBP-style API. Generate a stronger one next door with Web Crypto. Hashing for storage is bcrypt Generator — this page does not hash for production user tables.

FAQ

Is the password checked against breach lists?: No. That would require sending it. This is an on-device entropy / class check.
Does a high score mean it is unused elsewhere?: No. Strength is not uniqueness. Do not reuse passwords across sites.
Where do I generate a better one?: Password Generator in this sandbox, using Web Crypto.

Password Strength Checker

Check password strength, estimate crack time, and generate secure passwords.

Enter Password

Requirements

At least 12 characters

Contains uppercase letter

Contains lowercase letter

Contains number

Contains special character

Password Tips

• Use a passphrase of 4+ random words for memorable security
• Avoid common patterns like "Password123!"
• Use a unique password for every service
• Consider using a password manager