All tools
Password Strength
Entropy + breach-list check. Nothing leaves your browser.
Your password never leaves your browser. Strength is computed locally. The breach check hashes it on your device and sends only the first 5 characters of that hash (k-anonymity) — the password itself is never transmitted.
Weak passwords are one risk. Exposed keys and open databases are another — run a full scan on your app.