How to password entropy and crack-time auditor
- Step 1Type or paste a password — Enter the password to audit. It stays in your browser memory only.
- Step 2Audit — zxcvbn analyzes patterns, dictionary matches, and entropy in real time.
- Step 3Read the report — Score, crack time, and improvement suggestions are displayed.
Frequently asked questions
Is my password really not transmitted?+
Open DevTools Network tab while typing. You'll see zero outbound requests. zxcvbn runs as JavaScript in your browser.
What is a good zxcvbn score?+
Score 4 means centuries of crack time at 10 billion guesses/second. Score 3 is acceptable. Below 3, strengthen the password.
Is this NIST-compliant?+
zxcvbn pre-dates NIST SP 800-63B but aligns with its philosophy: prefer longer, harder-to-guess passphrases over arbitrary complexity rules.
Privacy first
Every JAD Security operation runs entirely in your browser. Files, passwords, and PGP private keys never leave your device — verified by zero outbound network requests during processing.