Skip to content
Convertto

Password Policy Tester

Test a password against a policy and see whether the policy actually improves security.

A password policy tester checks a password against length and composition rules. It also reports the theoretical entropy and an estimated crack time — and explains that NIST dropped composition rules in 2017, because requiring a symbol and a digit produces predictable passwords like Password1! rather than strong ones.

Runs in your browser
Runs locally
The password is never transmitted, logged or stored
Current guidance
NIST SP 800-63B recommends length and breach screening over composition rules
Privacy
Runs entirely in your browser — nothing is uploaded
Cost
Free, unlimited, no sign-up

Frequently asked questions

Why does Password1! pass every rule but score badly?

Because composition rules test the shape of a password, not its unpredictability. Capitalising the first letter, appending a digit and ending with an exclamation mark is the most common pattern there is, so a cracking dictionary tries it in the first few thousand guesses.

How to use the password policy tester

  1. 1Enter the password — it stays in your browser and is never sent anywhere.
  2. 2Set the minimum length.
  3. 3Set the maximum repeated character run.
  4. 4Turn "Reject common passwords" on or off as needed.
  5. 5Turn "Require an uppercase letter" on or off as needed.
  6. 6Turn "Require a lowercase letter" on or off as needed.
  7. 7Turn "Require a digit" on or off as needed.
  8. 8Turn "Require a symbol" on or off as needed.
  9. 9The result appears immediately — copy or download it.

Embed this tool

Put the working password policy tester on your own site. It runs in your visitors' browsers exactly as it does here — free, no account, nothing uploaded.

Share this tool

Related tools

Password Strength CheckerEstimate how long a password would take to crack, and see exactly what weakens it.Bcrypt Hash GeneratorHash a password with bcrypt at a configurable cost factor — the right way to store passwords.Passphrase GeneratorGenerate memorable Diceware-style passphrases from random words.Password GeneratorGenerate strong random passwords using your browser's cryptographic random source.Protect PDF with PasswordEncrypt a PDF with a password using AES-128, and choose what readers are allowed to do.SSH Key Fingerprint CalculatorCompute the SHA-256 and MD5 fingerprints of an OpenSSH public key and read its details.

Last updated

More hash & crypto tools