Loading page
About this tool
Check a password against the 8-14 character rules typical of Indian government portals, including PAN and mobile checks.
Government Portal Password Tester checks a candidate password against the rule shape Indian government portals share: 8 to 14 characters, at least one uppercase letter, one lowercase letter, one digit and one special character from a short accepted list, no spaces, and nothing derived from your login ID, registered mobile number or PAN. It reports each rule separately, flags characters such as angle brackets and quotes that these forms reject as injection attempts, and estimates how long the password would survive guessing. Everything runs in the browser — no value is transmitted or stored.
Open Government Portal Password Tester on AltFTool — it loads instantly in your browser.
Paste or type the text you're working with.
Choose how it should be transformed or analyzed.
Copy the finished text into your document or post.
Each constraint is tested on its own line, with the reason the portal imposes it.
Validates PAN in the five-letters, four-digits, one-letter format and ten-digit mobile numbers starting 6-9.
Plain client-side JavaScript — nothing is uploaded, stored or logged.
The common profile is 8 to 14 characters containing at least one uppercase letter, one lowercase letter, one digit and one special character from a restricted list such as @ # $ % & * !, with no spaces. Most also block the login ID inside the password and prompt a change roughly every 90 days. Individual portals vary, so read the rule text printed beside the password box.
Those characters are filtered as possible injection attempts by the form's input validation, so the password is rejected before it reaches the password rules at all. The bigger risk is a portal that accepts such a character at registration and then strips it at login, which locks you out of your own account — stick to the documented symbol list.
You should not, and many portals actively block it. On tax portals the PAN is often the user ID itself, and both PAN and date of birth appear on documents and acknowledgements that pass through many hands. Anything printed on a form you have submitted is a poor secret.
Change the password immediately from a device you trust, check the registered mobile number and email on the profile in case they were altered, and enable any second factor the portal offers. Financial fraud can be reported on the national cybercrime helpline 1930 or at cybercrime.gov.in. This tool is informational and is not legal or official guidance — follow the portal's own grievance process.