Question 1

Is my entered password uploaded or logged?

Accepted Answer

No. All analysis is performed locally in your browser. The password is not sent to any server and is not stored. You can verify this by using the tool while disconnected from the internet.

Question 2

How is the cracking time estimated?

Accepted Answer

First, we estimate the password's entropy (in bits) based on its character set and length, then divide that by the number of guesses an attacker can attempt per second. For offline scenarios, we assume a GPU can perform roughly 10 billion hashes per second. For online scenarios, we assume a server-side rate limit of about 100 attempts per second. This is an order-of-magnitude reference; actual time depends on the hashing algorithm and the attacker's computational power.

Question 3

Why is length more important than adding symbols?

Accepted Answer

Password entropy increases linearly with length but only logarithmically with the size of the character set. Increasing length from 8 to 16 characters typically provides a much greater gain in entropy than just adding a few symbols to an 8-character password. Therefore, prioritizing longer passwords or passphrases is recommended.

Password Strength Checker

Frequently Asked Questions