Test your password strength in real time. Check entropy, estimate crack time, and verify Microsoft 365 compliance — nothing leaves your browser.
Nothing is sent to the server — all processing happens in your browser.
Enter a password above to check its strength
Password entropy measures the unpredictability of a password in bits. It is calculated as length × log₂(pool), where pool is the number of possible characters (lowercase = 26, uppercase = 26, digits = 10, symbols = 33).
A password using only lowercase letters has a pool of 26, so an 8-character password gives about 37.6 bits of entropy. Adding uppercase, digits, and symbols increases the pool to 95, giving the same 8-character password about 52.7 bits.
Length matters more than complexity. A 16-character lowercase password (75.2 bits) is far stronger than an 8-character mixed-charset password (52.7 bits). Consider using passphrases — four or more random words strung together — for both strength and memorability.
Microsoft 365 enforces specific password requirements for user accounts. Understanding these policies helps ensure compliance when setting up new accounts or resetting passwords.
The checker above tests against these specific policies. A password that passes the M365 badge will be accepted by Microsoft 365's password validation — but always combine it with multi-factor authentication for proper security.
Attackers use sophisticated dictionaries and pattern matching to crack passwords. Avoid these common weaknesses:
DMC IT Services provides cybersecurity assessments, Microsoft 365 hardening, MFA deployment, and security policy design for SMBs across London, Cambridge, Hertfordshire, and Bedfordshire.
Talk to an Engineer