Password Crack Time Estimator

Summary

Enter a password or configure its properties to see how long it would take an attacker to crack it by brute force.

How it works

1. Enter a password directly, or manually set the character set and length.
2. The tool detects which character types are used (lowercase, uppercase, digits, symbols).
3. It calculates the total keyspace: character set size raised to the power of the password length.
4. Select an attacker speed profile (online attack, offline MD5, bcrypt, etc.).
5. The tool divides the keyspace by the hash rate to produce an estimated crack time.
6. Results are displayed in a human-friendly format alongside a strength rating.

Use cases

• Check whether your current passwords are strong enough against modern hardware.
• Understand the impact of adding one more character to a password.
• Compare the security difference between short complex vs. long simple passwords.
• Learn how much slower bcrypt/Argon2 makes offline attacks compared to MD5.
• Educate users or students about password security and entropy.
• Audit password policies for minimum strength requirements.
• Evaluate the effect of using symbols and mixed case on crack time.
• Demonstrate why passphrases outperform complex short passwords.

Frequently Asked Questions