Password Policy Tester
Check a password against your exact rules.
How to use
- 1 Type or paste the password you want to test.
- 2 Adjust the policy: minimum length and which character classes are required.
- 3 Toggle the no-repeats and no-sequences hygiene checks as needed.
- 4 Read the per-rule pass/fail list and the compliant badge.
About Password Policy Tester
The Password Policy Tester answers a precise question that a strength meter cannot: does this password satisfy every rule you require? Instead of a vague score it checks the password against an explicit, adjustable policy and reports each rule as pass or fail, so a user trying to register — or an admin documenting requirements — can see exactly what still needs fixing.
You control the policy.
Set a minimum length, toggle requirements for lowercase letters, uppercase letters, digits and symbols, and switch on two hygiene checks: one that rejects three or more identical characters in a row (like "aaa") and one that rejects obvious sequences (like "abc" or "321").
As you type a candidate password every rule re-evaluates live, the met-rules counter updates, and a clear compliant or not-yet-compliant badge tells you whether all conditions are satisfied.
A show-password toggle helps you verify what you typed.
Crucially, the password never leaves your device.
All checking is done with plain JavaScript in your browser — there is no network request, no logging and no storage — so you can safely test real passwords.
The tool also works offline once loaded, making it a quick, private way to validate passwords against a corporate or application policy.
FAQ
Is my password sent anywhere?
No. Every check runs locally in your browser using JavaScript. The password is never uploaded, logged or stored, so it is safe to test real passwords.
What counts as a "sequence"?
A run of three or more characters whose codes ascend or descend by one, such as "abc", "789" or "321". These are easy to guess, so the rule flags them.
How is this different from a strength meter?
A strength meter estimates how hard a password is to crack. This tool checks compliance with specific, configurable rules and tells you exactly which ones pass or fail.