MyPassGen
Password strength audit
Type a password you already use. See strength and whether it sits on a public leaked-password list. The candidate is not uploaded.
How we judge strength on this device
People search “password strength checker” or “was my password leaked” to learn whether a reused passphrase is guessable. MyPassGen keeps the password in the input box. Strength, entropy, and risk hints are computed here.
The blacklist is a public top leaked-password list. It catches strings such as “password” and “12345678”. It does not send your candidate to an external API to search the whole internet. A hit is marked weak even if the string looks long.
- Live Weak / Medium / Strong / Very strong grades, plus estimated offline brute-force and online rate-limited times
- Missing character classes, repeated patterns, and other risks
- Need a new password? Use the online password generator on this device. Do not reuse a few swapped letters
FAQ
Does the strength check upload my password?
No. Strength, entropy, and the leaked-list comparison all run in the browser. The candidate is not sent to the server and is not queried against an external breach API.
Is this a live breach lookup? Can it prove my password was never dumped?
No. This tool compares against a built-in public top leaked-password list. It finds widely abused passwords. It cannot prove a password never appeared in any breach.
What does entropy on the strength bar mean?
Entropy estimates how hard a password is to brute-force. Longer strings and more character classes usually raise it. A hit on the weak-password list is still marked Weak, even if it looks long.
What if the result is too weak?
Use the online password generator on this device. Do not reuse important accounts. To send a new password to a colleague, use a burn-after-read link; the first read destroys it.