How strong is your password?
See its estimated crack time, in your browser. Your password never leaves this page.
Analysed entirely in your browser. Your password is never sent to ShieldFive or stored anywhere.
A strong, unique password is step one. ShieldFive is step two: post-quantum, zero-knowledge storage where your files are encrypted on your device, so even we only ever hold ciphertext.
Get 5 GB freeQuestions
- Is it safe to type my password into this checker?
- Yes. The analysis runs entirely in your browser — your password is never sent to ShieldFive or stored anywhere. That said, as a general habit, only enter passwords into tools you trust and that are clearly client-side, like this one.
- How is the strength estimated?
- From entropy: the size of the character set and the length of the password determine how many guesses an attacker would need, which we convert into an estimated offline crack time. We also flag passwords that appear on common-password lists as instantly cracked. It is an honest estimate, not a guarantee — it will not catch every weak pattern.
- What should I do if my password is weak?
- Replace it with a long, random, unique password (our free generator can create one), use a different password for every account, and turn on two-factor authentication. You can also check whether a password has already appeared in a breach.
- Does ShieldFive store what I type?
- No. There is no server involved — the check happens locally in your browser. We never receive, log, or store your input.