Password crack time estimator
Try an example, then add a character. Watch how much the estimated search time changes.
Or generate a random password.Estimated time to try every combination
Calculations happen locally in your browser. This tool does not send, log, or save what you type. You can explore it with made-up examples.
A big number is not proof of a strong password. This illustration treats the characters as random. Names, dates, common words, and patterns can be guessed much sooner.
What does this estimate assume?
The estimate uses 10 billion guesses per second and shows the time to search all combinations, not the time when an attacker will necessarily succeed. For a uniformly random password, the average is about half that time.
It infers character groups from your example: 26 lowercase letters, 26 uppercase letters, 10 digits, and 32 ASCII punctuation symbols (33 with space). It assumes every position was chosen independently from those groups. A single password cannot tell us how it was generated, so this is only a rough illustration. Non-ASCII characters need an explicitly chosen alphabet and are not estimated here.
The rate is an assumption, not a benchmark for every system. Real speeds depend on password storage and hardware; login limits and lockouts are not modeled. Random-word passphrases need a word-based model instead.
The colors distinguish short and long durations, not safe and unsafe passwords. Durations are approximate, using 365-day years and 30-day months.
Want to choose the alphabet and guessing speed, or compare average guesses with the full search? Use the brute-force calculator.