Password Check
Find out how strong your password habits are — and what makes a password hard to guess.
Your password never leaves this device. It isn’t sent, stored or recorded anywhere.
Prefer not to type a real one? Type something with the same pattern instead.
Start typing to see how it holds up.
This is an estimate based on length and common patterns. It can’t tell whether a password has already appeared in a data breach. Where a site offers a passkey, that’s stronger than any password. Read how to create a strong password and what two-step verification is.
Common questions
Is it safe to type my password into the Password Check?
Digital Life Check’s Password Check works out the strength inside your browser, and the password is not sent, stored, logged or put in the web address. The only thing recorded is that the tool was used, with the strength band it showed. If you would rather not type a real password, type a made-up one with the same pattern.
How does the Password Check measure strength?
Digital Life Check’s Password Check estimates how hard a password is to guess from its length and the mix of character types, then takes away credit for patterns people commonly use: well-known passwords, keyboard runs such as “qwerty”, sequences such as “1234”, repeated characters, years, and letters swapped for look-alike symbols. The result is an estimate, not a simulation of a real attack.
Can the Password Check tell me if my password has been in a data breach?
No. Digital Life Check’s Password Check does not compare your password with lists of breached passwords, so it cannot tell you whether it has already been leaked. It only estimates strength from length and common patterns, so even a password that scores well should be used for one account only.
What makes a password stronger?
Length helps more than swapping letters for symbols. Digital Life Check’s Password Check suggests making a password longer when it is under 15 characters, building it from three or more random, unrelated words, using it for one account only, and turning on two-step verification for important accounts, starting with your email.