{"categories":[{"label":"Security","url":"https://skillfed.io/packages/category/security/2"}],"enrichment":{"capability":"A Django password validator that uses pattern matching and dictionary analysis (via zxcvbn) to estimate actual password strength instead of applying fixed rules, and provides translatable feedback to guide users toward stronger passwords.","skillfed_tags":["password-validation","django-auth","i18n"],"use_cases":["Replace Django's default password validators with strength estimation that adapts to user context and keyboard patterns","Build a live password-strength meter that shows users real-time feedback as they type, using get_strength()","Enforce stronger passwords in production while allowing weaker ones in development by toggling PASSWORD_MINIMAL_STRENGTH","Prevent users from choosing passwords that resemble company or product names by adding them to PASSWORD_EXTRA_DICTIONARY","Provide password feedback in languages other than English by leveraging the package's 131 language translations"],"what_it_does":"django-zxcvbn-password-validator integrates the zxcvbn password-strength estimator into Django's authentication system as a pluggable validator. Instead of enforcing rigid rules (minimum length, character types), it analyzes patterns, keyboard layouts, and common password dictionaries to estimate how long a password would take to crack offline. It then rejects passwords below a configurable strength threshold (0\u20134 scale) and provides actionable, translated feedback explaining what makes a password weak.\n\nThe package wraps zxcvbn's analysis in Django's validator interface and adds internationalization: error messages, warnings, and suggestions are translated to the active language. You can also supply a custom dictionary of terms (company names, product names) that should not appear in passwords. For use cases that need to inspect strength without raising an error\u2014such as powering a live strength meter\u2014the get_strength() method returns a dict with the score, estimated crack time, and suggestions without validation.","worth_installing":"Yes. The package is actively maintained, has no known vulnerabilities, low install friction, and solves a real security problem\u2014pattern-based strength estimation is more effective than rule-based validation. Use it if your Django project needs password validation and you want to guide users toward genuinely harder-to-crack passwords rather than arbitrary character rules."},"id":"django-zxcvbn-password-validator","links":{"html":"https://skillfed.io/packages/django-zxcvbn-password-validator","md":"https://skillfed.io/packages/django-zxcvbn-password-validator.md","pypi":"https://pypi.org/project/django-zxcvbn-password-validator/"},"maintenance":{"status":"active"},"meta":{"latest_release":"2026-06-14","license_spdx":null,"license_treatment":"permissive","name":"django-zxcvbn-password-validator","python_support":"supports_current","summary":"A translatable password validator for django, based on zxcvbn-python."},"popularity":{"monthly_downloads":284524,"position":8063,"tier":"top_15000"},"security":{"n_vulnerabilities":0},"version":"1.7.0"}