Produces an explainable estimate from password length, character pool, repetition, and common patterns. The password remains in browser memory; no breach database is queried and no absolute security guarantee is made.
The password is not sent to the network, a breach service, or localStorage.
Crack time is a mathematical estimate; real outcomes depend on the hash/KDF, attack method, and breach exposure.
Avoid entering a real password on a shared device; use a representative sample when possible.
Review the strength level, entropy estimate, and warnings.
Replace short or predictable structure with a longer unique passphrase.
Automated output is a preliminary assessment. Do not use it alone for legal, financial, medical, or security-critical decisions.
No. Processing runs in this browser tab. Data leaves the page only when you choose to copy or download the result.
The tool produces consistent output from disclosed rules and browser APIs, but context, data quality, and method limitations can affect it. Verify high-impact decisions.
No. Tool input is not persisted to localStorage or another durable store. Only a non-sensitive tool-usage count may be kept on this device for personalized home-page shortcuts.