This tool estimates how strong a password is, calculating its entropy in bits, giving it a strength rating, and estimating how long it would take to crack by brute force. A strong password is your first line of defence for online accounts, yet many people rely on passwords that are far weaker than they realise. Strength comes down to two things: how long the password is, and how large a pool of characters it draws from. A short password, or one using only lowercase letters, has relatively few possible combinations and can be guessed quickly by a computer. A long password mixing uppercase and lowercase letters, digits and symbols has astronomically more possibilities, pushing the time to crack it from seconds into millions of years. This is captured by entropy, measured in bits, where each extra bit doubles the number of possibilities. This tool calculates it for you. You type a password, and the checker works out the size of the character pool it uses, computes the entropy from that and the length, assigns a rating from very weak to very strong, and estimates the brute-force crack time assuming a fast attacker. Crucially, everything runs in your browser and nothing is ever sent anywhere, so it is safe to test. The result updates as you type. Use it to judge your passwords, to understand what makes one strong, or to help choose a better one. A few principles: length matters more than complexity, so a long passphrase beats a short jumble; avoid dictionary words and common patterns, which real attackers try first; and use a unique password for every account, ideally with a password manager.
Entropy = length x log2(character pool size). Crack time assumes 10 billion guesses per second. Tested entirely in your browser; nothing is sent anywhere.
The tool inspects which character types the password uses, lowercase, uppercase, digits and symbols, and adds up the size of that combined pool. The entropy is the password length times the base-2 logarithm of the pool size. The crack time divides the total number of possible combinations by an assumed fast guessing rate.
The password P@ssw0rd123 is 11 characters and uses lowercase, uppercase, digits and symbols, a pool of about 95 characters. Its entropy is 11 times the log base 2 of 95, about 72 bits, rated strong. At 10 billion guesses a second, brute-forcing it would still take an impractically long time, though real attackers would try common patterns first.
If you've found a bug, or would like to contact us, or learn more about James Graham and Calculate.co.nz.
Calculate.co.nz is partnered with Interest.co.nz for New Zealand's highest quality calculators and financial analysis.
All calculators and tools are provided for educational and indicative purposes only and do not constitute financial advice.
Calculate.co.nz is proudly part of the Realtor.co.nz group, New Zealand's leading property transaction literacy platform, helping Kiwis understand the home buying and selling process from start to finish. Whether you're a first home buyer navigating your first property purchase, an investor evaluating your next acquisition, or a homeowner planning to sell, Realtor.co.nz provides clear, independent, and trustworthy guidance on every step of the New Zealand property transaction journey.
Calculate.co.nz is also partnered with Health Based Building and Premium Homes to promote informed choices that lead to better long-term outcomes for Kiwi households.
Calculate.co.nz is hosted in Auckland via SiteHost new Zealand.
All content on this website, including calculators, tools, source code, and design, is protected under the Copyright Act 1994 (New Zealand). No part of this site may be reproduced, copied, distributed, stored, or used in any form without prior written permission from the owner.
About & trust: Why Calculate is NZ's most comprehensive · By the Numbers · How we compare · Editorial standards · How we keep data current · NZ finance glossary · Research & data · Financial literacy NZ · About · Privacy policy · Terms of use
Reviewed and maintained. Last reviewed 2026-06-07 and checked on a twice-monthly cycle against IRD, RBNZ and Stats NZ. How we keep data current.
© 2026 Calculate.co.nz. All rights reserved. Building free NZ calculators since 2011.