Where does the password I type go?

Nowhere at all — no network request happens. Typing a password you really use into a “strength checker” site is risky; here there is nothing to worry about.

Does it check whether the password has been breached?

No. Doing that means sending part of the value to an outside service, and the moment it does, the promise that nothing is sent is broken. Instead it points out the weaknesses directly — common words, keyboard runs, years.

How is the “time to crack” calculated?

From the character sets used and the length it counts the possibilities, assuming modern hardware makes ten billion attempts a second. Any weakness found cuts it down — because in reality it would fall much faster.

What single change helps most?

Length. Adding four characters beats sprinkling in a few symbols by a wide margin.

Why leave out lookalike characters?

l and I, O and 0 are hard to tell apart by eye. If you will ever write it down or read it aloud, leaving them out is safer.

How safe is the “easy to remember” mode?

Each piece has 1,900 possibilities, so five pieces give 1,900^5 × 100 ≈ 2^61 combinations. Even at ten billion attempts a second that averages about four years. For more, raise it to six or eight pieces.

Password generator · strength check

Name: 비밀번호 만들기·확인
Author: KarmoLab

Random · pronounceable chunks you can remember · strength check

비밀번호 만들기·확인

안전한 비밀번호를 만들고, 쓰던 것이 얼마나 버티는지 확인합니다. 아무것도 전송하지 않습니다

De_6SJkKqNwh-BLKQv6a

길이 20자

대문자 숫자 기호 헷갈리는 글자 빼기 (l, I, O, 0, 1)

세기

아주 강함

버티는 시간

수백 년 넘게

쓰는 글자 종류

70가지

만들었어요. 눌러서 복사하세요 — 이 값은 어디에도 보내지지 않습니다.

확인할 비밀번호

비밀번호는 안 보냅니다 — 해시 앞 다섯 글자만 보내고, 나머지 대조는 이 브라우저에서 합니다

적은 값은 이 브라우저 밖으로 나가지 않습니다 — 통신이 일어나지 않습니다.

Generates safe passwords and checks how long the one you have been using would hold. Nothing you type is sent anywhere.

How to use it

In Generate, pick the length and character types
Copy the password it made
In Check, try the password you have been using
Fix the weaknesses it points out

Common questions

Where does the password I type go?: Nowhere at all — no network request happens. Typing a password you really use into a “strength checker” site is risky; here there is nothing to worry about.
Does it check whether the password has been breached?: No. Doing that means sending part of the value to an outside service, and the moment it does, the promise that nothing is sent is broken. Instead it points out the weaknesses directly — common words, keyboard runs, years.
How is the “time to crack” calculated?: From the character sets used and the length it counts the possibilities, assuming modern hardware makes ten billion attempts a second. Any weakness found cuts it down — because in reality it would fall much faster.
What single change helps most?: Length. Adding four characters beats sprinkling in a few symbols by a wide margin.
Why leave out lookalike characters?: l and I, O and 0 are hard to tell apart by eye. If you will ever write it down or read it aloud, leaving them out is safer.
How safe is the “easy to remember” mode?: Each piece has 1,900 possibilities, so five pieces give 1,900^5 × 100 ≈ 2^61 combinations. Even at ten billion attempts a second that averages about four years. For more, raise it to six or eight pieces.

Other tools

Goes to an outside service Some features reach an outside service — where and what is listed below.

Goes to — api.pwnedpasswords.com

This tool page states where what you enter goes — see the badge above. All tools · KarmoLab · Who made this · Built with AI. View source