DevBentoAnalyzing a Strong Password
See how a high-entropy passphrase scores against dictionary attacks and brute force time estimation. Analyze password strength with real-world attack models.
Related Tools
***Password Generator
Generate cryptographically secure passwords with customizable length, character sets, and entropy indicators. Runs in your browser using the Web Crypto API.
shaHash Generator
Generate MD5, SHA-1, SHA-256, and SHA-512 hashes from text or files. Uses the browser's Web Crypto API for SHA hashes with a pure JS fallback for MD5.
Analyzing a Strong Password
This example demonstrates the XKCD passphrase approach: four random words joined by hyphens. Despite having no uppercase letters, digits, or special characters, it scores high because of its length and entropy.
What You Will See
- Score: 3-4 (Strong to Very Strong) - High entropy from length and word randomness
- Crack time: centuries - Even offline attacks cannot brute-force this in any meaningful timeframe
- Patterns detected: May flag individual dictionary words, but the combination is unique
- Entropy: ~103 bits - Well above the 80-bit threshold for strong security
How to Use
- The passphrase “correct-horse-battery-staple” is pre-filled
- Compare the crack time estimates to the weak password example
- Notice how entropy increases with each additional word
- Try removing words to see how the score drops (3 words is weaker, 5 words is stronger)
- This passphrase does not appear in any known breach database
🔒
Nothing you paste leaves this tab. Every tool runs entirely in your browser — no upload, no server, no account.