{"categories":[{"label":"Python Modules","url":"https://skillfed.io/packages/category/software-development-libraries-python-modules/4"},{"label":"Security","url":"https://skillfed.io/packages/category/security"}],"enrichment":{"capability":"Estimates password strength by analyzing patterns, common words, and user data, returning a score from 0 to 4 plus actionable feedback and crack-time estimates.","skillfed_tags":["password-validation","security-scoring"],"use_cases":["Validate user passwords during account creation or password-reset flows with real-time feedback on strength.","Implement server-side password policy enforcement that rejects weak passwords before storing them.","Display crack-time estimates to users to help them understand the security implications of their password choice.","Add custom dictionaries to detect common passwords or phrases specific to your organization or language.","Analyze password datasets to identify weak patterns and inform security training or policy updates."],"what_it_does":"zxcvbn is a Python port of Dropbox's realistic password strength estimator. It analyzes a password against multiple pattern-matching techniques\u2014dictionary words, common sequences, repeated characters, keyboard patterns\u2014and returns a numeric score (0\u20134) along with specific feedback on weaknesses and estimated crack times under different attack scenarios (online throttled, online unthrottled, offline slow hashing, offline fast hashing). You can supply user-provided data like names or birthdates to be checked against the password, and optionally customize the maximum password length or add custom frequency dictionaries for additional languages or domain-specific word lists.\n\nThe package is recommended by the original Dropbox developers and is the most actively maintained Python implementation. It has no external runtime dependencies, making it straightforward to integrate into authentication systems, password validators, or user-facing password-creation interfaces. The library also exposes a command-line interface for scripting and testing.","worth_installing":"Yes. zxcvbn is a well-maintained, dependency-free library recommended by its original creators, with no known vulnerabilities, permissive licensing, and broad Python version support. Install it if you need realistic password strength estimation with actionable feedback rather than simple regex or entropy rules."},"id":"zxcvbn","links":{"html":"https://skillfed.io/packages/zxcvbn","md":"https://skillfed.io/packages/zxcvbn.md","pypi":"https://pypi.org/project/zxcvbn/"},"maintenance":{"status":"active"},"meta":{"latest_release":"2025-02-19","license_spdx":null,"license_treatment":"permissive","name":"zxcvbn","python_support":"unspecified","summary":null},"popularity":{"monthly_downloads":5840471,"position":2025,"tier":"top_5000"},"security":{"n_vulnerabilities":0},"version":"4.5.0"}