Worked example
Password1 includes multiple character types but is short and predictable. A longer random combination will usually receive better feedback. Clear the input immediately afterward.
Understanding settings and results
- Assessment uses site-hosted zxcvbn 4.4.2 to detect common words, repeats, keyboard patterns, dates and sequences. It does not estimate entropy from character counts.
- Actual risk also depends on leaks, password reuse and the website login protections.
Scope and limitations
- Does not check breach databases; coverage of Chinese words and personal information is limited. Inputs above 128 characters or a failed component load are marked unassessed, not truncated and scored.
- Do not enter important active passwords on a public device.
Troubleshooting
- For a low score, increase length and remove names, birthdays and keyboard sequences.
- Enable multifactor authentication for important accounts; do not rely on a password score alone.
Privacy and processing
The assessment runs entirely in the browser. Input is not uploaded.