Password Strength Auditor
Not a rule checklist — an actual estimate of how long it would take to crack.
IntermediateWeb appTool10–20hAI-buildable 4/5no setupworth shipping
Most strength meters count character classes, which rewards 'P@ssw0rd1' and punishes a long passphrase. This one estimates real entropy: pattern detection, dictionary matching, keyboard walks, and a crack-time estimate with an explanation of what it found.
UI
Logic
Useful
Hosting · Free forever
Deploys free on GitHub Pages, Cloudflare Pages or Vercel Hobby.
Deploy it and share a link.
Core features · 7
- Strength updates live as the password is typed
- Dictionary words, dates and keyboard walks are detected
- An estimated crack time is shown for different attack scenarios
- The specific weaknesses found are explained in words
- A long passphrase scores better than a short complex string
- A generator offers a stronger alternative
- Nothing typed is ever sent anywhere, and the UI says so
The interesting part
- Entropy estimation that reflects real attacker behaviour
- Detecting substitutions like 4 for a and 0 for o
- Keeping a wordlist small enough to ship to the browser
Once it works
- Add a breached-password check using k-anonymity
- Add a visual entropy breakdown per segment
- Add support for multiple languages' dictionaries
Suggested stack
reacttypescripttailwind