this post was submitted on 18 Mar 2026
-6 points (12.5% liked)

netsec - Network Security

449 readers
9 users here now

This is the netsec Community, a community-curated aggregator of technical information security content. Our mission is to extract signal from the noise - to provide value to security practitioners, students, researchers, and hackers everywhere.

Content Guidelines:

Discussion Guidelines:

Prohibited Content:

founded 2 years ago
MODERATORS
 

Made a password strength checker that runs 100% in the browser:

  • Calculates entropy bits and character space
  • Estimates crack time for different attack scenarios (online brute force, GPU cluster, nation-state)
  • Detects common passwords and keyboard patterns
  • Gives specific improvement tips

Nothing is sent to any server. All analysis runs client-side in JavaScript.

The math is straightforward: character_space ^ length = total combinations, then divide by guesses/second for different attack types.

Also includes a list of the top 50 most common passwords to check against.

Feedback welcome — particularly around the crack time estimates. I used 10B guesses/sec for the default GPU scenario, based on hashcat benchmarks for bcrypt.

you are viewing a single comment's thread
view the rest of the comments
[–] Bluegrass_Addict@lemmy.ca 1 points 1 day ago

whatchu mean crack time?