Length and unpredictability matter more than decoration
A long unique password or randomly generated passphrase usually resists guessing better than a short word with predictable substitutions. Character variety helps, but appending 1! to a common word does not make it unpredictable.
Avoid repetition and common sequences
Repeated characters, qwerty patterns, dates, names, and common password words are easy for guessing systems to prioritize. Suggestions from the checker are deterministic local pattern checks, not a guarantee against every attack.
Use one password per account
Reuse turns one breached service into access to other accounts. A password manager can generate and retain unique values without requiring you to memorize every one.
Breach checking and MFA are separate
This private tool makes no network request and has no breach corpus, so it cannot report whether a password appeared in a known leak. Multi-factor authentication adds a separate barrier but does not excuse a reused or weak password.
What the local checker does
The page evaluates length, character classes, repeated sequences, and a small set of obvious patterns in memory. It does not log, save, upload, or place the password in a URL, and it avoids unsupported exact crack-time claims.
- Use 16 or more characters when practical.
- Prefer generated passwords or multi-word passphrases.
- Store recovery codes separately.