MyPassGen
Password strength checker
Type a password you already use. See how strong it is, and whether it sits on a public leaked-password list. The password is not uploaded.
How this password strength checker works on this device
People search “password strength checker,” “how strong is my password,” or “was my password leaked” to learn whether a reused passphrase is guessable. MyPassGen keeps the password in the input box. Strength, entropy, and risk hints are computed here.
The blacklist is a public top leaked-password list. It catches strings such as “password” and “12345678”. It does not send your candidate to an external API to search the whole internet, and it is not a live Have I Been Pwned lookup. A hit is marked weak even if the string looks long.
- Live Weak / Medium / Strong / Very strong grades, plus estimated offline brute-force and online rate-limited times
- Missing character classes, repeated patterns, and other risks
- Need a new password? Use the online password generator on this device. Do not reuse a few swapped letters
FAQ
Does the password strength checker upload my password?
No. Strength, entropy, and the leaked-list comparison all run in the browser. The candidate is not sent to the server and is not queried against an external breach API.
Is this a Have I Been Pwned lookup? Can it prove my password was never dumped?
No. This tool compares against a built-in public top leaked-password list. It finds widely abused passwords. It cannot prove a password never appeared in any breach.
What does entropy on the strength bar mean?
Entropy estimates how hard a password is to brute-force. Longer strings and more character classes usually raise it. A hit on the weak-password list is still marked Weak, even if it looks long.
What if the result is too weak?
Use the online password generator on this device. Do not reuse important accounts. To send a new password to a colleague, use a burn-after-read link; the first read destroys it.