Internet Safety · Tool

Would your password survive?

Type a password like the ones you use (please not your real one). Watch how a cracking computer takes it apart, and how long it would last if a website you use got hacked.

Or try:
How a cracker sees it
If a website you use is hacked, this password lasts
Stolen database, powerful computer10 billion guesses a second
Guessing on a login pageabout 10 guesses a second

What gave it away

    Length beats complexity

    Symbols and swapped letters fool people, not computers. A few random words beat them easily.

    How a leak check works without seeing your password

    Password managers and browsers check if your password appeared in a breach, without ever sending it. Step through how.

    Your phone

    Breach list server

    On the live Jarreb! site, this check asks the real Have I Been Pwned list of over 900 million leaked passwords.

    What to do

    Use a passphrase

    Four to six random words is long, strong and easy to remember.

    Never reuse

    When one site leaks, criminals try the same email and password everywhere else.

    Let a manager remember

    A password manager creates and fills a different strong password for every site.

    Turn on two-step login

    Even if your password leaks, a code on your phone or UAE PASS keeps the door shut.

    Times are rough estimates. Real attackers use huge lists of leaked passwords and common patterns, so a password that looks random to you may not be.