OneFirewall Alliance

Password Entropy Checker

Analyse password strength, estimate crack time, and generate cryptographically secure passwords

Check how strong a password is by its entropy and estimated time to crack, or generate a random password or passphrase with your chosen length and character sets using the browser's cryptographic random number generator. More free security tools.

Entropy Checker
Passwords are never sent anywhere — all analysis runs locally in your browser.
Crack Time Estimates
Attack ScenarioSpeedEstimated Time
Password Generator
Length
20
Uppercase (A–Z)
Lowercase (a–z)
Numbers (0–9)
Symbols (!@#$…)
Exclude ambiguous chars
0, O, l, 1, I
Passphrase Generator
Words
5
Separator
Capitalise words
Add number suffix
How It Works & Why It Matters

Password strength isn't about length rules or forced character classes — it's about entropy, the number of bits of randomness an attacker has to search through. This tool estimates entropy from the character sets actually used and the length, then converts that into an approximate offline crack time, so you can see why "P@ssw0rd1!" is weak despite satisfying most complexity policies, while a longer random passphrase is not.

The generator side uses the browser's Web Crypto API (crypto.getRandomValues), a cryptographically secure pseudo-random number generator, rather than Math.random() — which is predictable and unsuitable for anything security-sensitive. Everything runs locally in your browser; no password you type or generate is transmitted anywhere.

Need an enterprise password policy and identity security review?

If you like this tool, Speak with OneFirewall