The ultimate password strength meter
September 27, 2007I made some improvements on the password strength meters available on the web. Using prototype/scriptaculous, I stole some code from ZeBadger (thanks!) and created a new meter which dynamically changes while typing your password.
Click here to see the demo
If you want to use this script, feel free to download the source and use it on your website.
Enjoy.
Haha, damn, that’s one tough meter. Only something like ‘fG4%$GFhfghnRT356′ seems to be a strong password
Comment by Martijn de Kuijper — September 30, 2007 @ 9:40 pm
Hi Martijn,
I agree with your password has to be ‘extremely strong’ to fill the bar. I will make some changes to the script so that your pass has to be of less strenght.
Comment by admin — October 1, 2007 @ 2:25 pm
Maybe a bug, maybe not, but 5-character password is pretty close to FULL strength
i used first 5 characters of martins password: fG4%$
Comment by Slim — October 15, 2007 @ 4:52 pm
[…] read more | digg story […]
Pingback by My Hobby is Programming » The ultimate password strength meter — November 9, 2007 @ 4:27 pm
Hey guys…Am I missing something? Where is the download link?
Comment by mike — November 20, 2007 @ 12:47 am
I bet that no one in this world has a password strong enough to fill this meter…
Comment by adicrst — January 6, 2008 @ 12:18 am
It’s really good. I want to use this on my website. Where in my HTML document do I insert the code?
Comment by Ben — January 7, 2008 @ 8:01 pm
Where is the download link?
Comment by George — February 22, 2008 @ 11:31 am
It’s javascript, just get the code in the demo.
Comment by pablasso — March 11, 2008 @ 11:37 pm
The ultimate password strength meter…
I made some improvements on the password strength meters available on the web. Using prototype/scriptaculous, I stole some code from ZeBadger (thanks!) and created a new meter which dynamically changes while typing your password. Useful for form valida…
Trackback by Bookmarks.WittySparks.com — May 27, 2008 @ 4:44 pm
Just an observation: the strength-checking algorithm takes virtually no account of password length. Full strength can be achieved in 7 characters. I tend to use pass phrases as passwords - these can be 20-40 characters in length and despite the absence of numerals would be far more resistant to a brute-force cracking attempt than a short mixed string.
e.g. in my opinion, “Life is like a box of chocolates!” is cryptographically far stronger than “qQ123$%” Your script disagrees with me however, giving the former a score of around 40% and the latter a score of 100%.
Comment by Rob Pomeroy — August 19, 2008 @ 11:53 am