How to test password strength using these free tools

person entering passcode on smartphone

As cyberattacks and breaches increase in number, using the best password managers and utilising increased password strength are just one element of cybersecurity to be on top of.

The increasing sophistication of attacks means that strong passwords are a key barrier against these threats. Conversely, poor passwords are often a seriously weak link in organisational security, and even with the best password managers for business, you could see breaches because people just don't realise how easy their passwords are to crack.

Below, we've outlined four of the best free options for testing password strength online. Using these services only takes a minute or two, and it's well worth it given you can protect accounts and data with improved security. Increasing password strength is one sure-fire way to improve online security for you and your business.

1. LastPass

LastPass' password strength checker

LastPass provides an overall evaluation, along with tips to improve your password (Image credit: LastPass)

LastPass is a popular password manager for iOS and Android users. Like NordPass, LastPass offers a premium subscription, but the password strength test is available for free on the LastPass website. The tool works locally, so your information won’t be transmitted to LastPass servers.

While LastPass provides more information than Kaspersky, it isn’t as detailed as some of the other alternatives. It also doesn’t check information from previous data breaches, which can help you avoid using a password that’s already compromised.

Overall, LastPass is an excellent password manager, but it isn’t quite as effective at evaluating potential passwords. UIC offers the most thorough analysis, and other sites stand out from LastPass by looking at data breaches. That said, LastPass is a sufficiently helpful option for most use cases.

2. NordPass

NordPass' password strength checker

NordPass looks for your password in past data breaches to make sure it hasn’t been compromised (Image credit: NordPass)

NordPass is developed by the same team that’s behind NordVPN, and its password strength checker is just as effective. You can access the password strength tool without creating an account or starting a subscription. That said, NordPass is a good app to consider if you’re looking for a way to securely store and share passwords.

NordPass uses a number of criteria to evaluate your password, including length and the presence of symbols, numbers, and both uppercase and lowercase letters. It then uses that information to generate an estimated time to crack, but it’s worth mentioning that these estimates aren’t an exact science. The service also checks previous data breaches to verify that your password isn’t already compromised.

3. The University of Illinois at Chicago Password Strength Test

the UIC password strength test

The UIC Password Strength Test analyses each password using 16 criteria (Image credit: The University of Illinois at Chicago)

We tested a number of password strength tools, but the University of Illinois at Chicago Password Strength Test was undoubtedly the most comprehensive. It provides fine-grained analysis that covers every aspect of each password, making it easy to identify weaknesses and make the necessary adjustments.


Cyber security in the retail sector

Retailers need to ensure their business operations and internal data aren't breached


The website has a basic list of requirements, including length (eight or more characters), character diversity (one capital letter, one lowercase letter, and one number or punctuation), and no repeating patterns, dictionary worms, or common names. There’s also a thorough list covering other best practices, such as creating a unique password for new accounts rather than using the same one for every website.

UIC differentiates its password strength checker from other tools through its helpful analysis. While most sites use a few factors to check each password, UIC uses a total of 16. You’ll be able to identify common mistakes, like repetition or consecutive numbers, that most tools don’t look for. Unfortunately, the UIC password strength tool doesn’t look at data breaches, so you’ll need to check NordPass or another site if you want that information.

4. Comparitech

Comparitech's password strength test

The Comparitech password strength test processes data locally rather than transmitting it to Comparitech’s servers (Image credit: Comparitech)

Comparitech is an online security firm that sells cloud storage, antivirus solutions, VPNs, and other common tools. Like the other services on this list, Comparitech provides password strength tests through its website rather than requiring users to sign up or download an application.

Data is often targeted while in transit, so Comparitech never transfers your information to its servers. The password strength tool works locally and comes with many of the same insights available with other providers. Comparitech will flag length, character similarities, dictionary words, and other common issues.


Even if you know that capital letters, symbols, and length can make a password stronger, it can be tough to evaluate your own passwords and keep your information secure. These are just a few of the best sites to use if you want to check the strength of an existing or potential password.

Further reading on password managers

If you're looking for password management on a budget, check out our guide to the best free password managers. Lost your password? Use one of the best password recovery tools and regain access to your important accounts.

Alex McOmie

Alex is a writer focused on providing insightful, actionable content that can truly change the way readers approach their finances. Alex has been writing as a freelancer for several years on a variety of topics including marketing, parenting, and customer relationships along with personal finance. He’s particularly interested in the way seemingly small adjustments can transform a person’s financial outlook.