Is my password sent anywhere to be checked?
No. Every check runs locally in your browser — nothing you type here is ever transmitted or stored.
Why did a long password still score as weak?
Length alone isn't enough — passwords using only lowercase letters, common words, or predictable patterns like "123" score lower even if they're long.
What should I do if my password scores poorly?
Follow the specific unmet checks shown below the meter — usually adding character variety and length, and avoiding common words or sequences, is enough to reach a strong score.