data-password-entropy

Calculate password strength.

Synopsis

npm install data-password-entropy

const { passwordEntropy } = require('data-password-entropy');
console.log(passwordEntropy('P@ssw0rd'));  // 47

Overview

The data-password-entropy package provides a function to calculate the entropy of a password, measuring its strength against brute-force attacks. Unlike traditional rule-based methods that enforce specific criteria—such as minimum length or mandatory punctuation—which can either reject strong, unconventional passwords or accept weak ones like P@ssw0rd, entropy-based evaluation offers a more accurate assessment. By assigning a numerical value to a password's complexity and unpredictability, this empirical algorithm ensures that a password achieving an entropy score of 80 bits is considered sufficiently secure for most applications.

See also

Similar packages for other languages:

• npm
• pypi
• cpan (outdated)

Other implementations:

• PasswordEntropy-JS by rabbit-company.com
• string-entropy

License

Copyright 2024 Oleh Alistratov

Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.

Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.