davidstutz / password-score

Password scoring library written in Javascript.
http://davidstutz.de/password-score/
BSD 3-Clause "New" or "Revised" License
57 stars 21 forks source link

Seems pretty random #4

Closed rouen-sk closed 4 years ago

rouen-sk commented 4 years ago

So, first random thing I tried: aaaedf65seag6351e - result: very strong add one more number (aaaedf65seag6351e3) - result: weak seems legit :)

davidstutz commented 4 years ago

You can try to turn off the leetspeak part or the keyboard part ("e" is connected to the "3" on the keyboard). These modules cause the score to be very non-monotonic (i.e., longer password can reduce the score significantly). But this would be the same based on english words: "carpenter" can get a lower score (because it is more common and a correct english word) than "carpent" (which is incorrect, but shorter).