Do you upload passwords?

No. All strength checks and generation run in your browser. Breach check uses the k-anonymity range API: only the first 5 hex of the SHA-1 hash are sent to Have I Been Pwned.

What makes a strong password?

Length and diversity. Use 12+ characters mixing upper/lowercase, numbers, and symbols. Avoid common words, patterns, and reused passwords.

Password Strength Checker

Estimate strength in real time, generate strong passwords, and check if a password appears in known breaches (HIBP range API). Nothing is uploaded.

Password Strength Checker

Password

Strength

Very weak

Breach Check (Have I Been Pwned)

We hash the password with SHA-1 and only send the first 5 hex characters (k-anonymity).

Password Generator

Length: 16

a–z

A–Z

0–9

Symbols

Avoid ambiguous (l/I/1/O/0)

Tips & How to Use

1. Type a password: the meter updates in real time and shows suggestions.
2. Click “Check breach safely” to query HIBP via k-anonymity (no password is sent).
3. Use the generator to create strong random passwords and copy them.

Pro Tip: Do not reuse passwords. Consider a password manager and two-factor authentication.

Related Tools

Hash Generator (MD5/SHA)
Regex Tester
JWT Decoder / Encoder

Password Strength Checker

Breach Check (Have I Been Pwned)

Tips & How to Use

Related Tools

สินค้าแนะนำ