Password strength checkers are nothing new – they’ve been around for quite a while and their core purpose is to evaluate the strength of a given password. Here’s what one of the most popular password managers – 1Password – think of the word “password” as your password:
And here’s what a secure password looks like:
As you can see, both of the passwords that were provided to 1Password had a password strength meter – just that one password was terrible, the other fantastic. The strength of a given password directly depends on its entropy: in simple terms, that’s a measurement of just how unpredictable a given password is. The more unpredictable a password is, the better it’s strength.
Of course, passwords like the one seen above are close to impossible to remember, and that’s why they’re generated using a password manager – password managers are software solutions that not only help us generate secure passwords like the one shown above but also store them securely: all of our passwords can be accessed with a single so-called “master” password – the master password unlocks access to our password vault (the vault where all of our secrets are stored.) Learn more about the security model of password managers here.
Coming back to password strength meters, though – not all of them are built equal. The strength measurement, message, and entropy calculation heavily depend on the developer of the password strength meter, and that’s why it’s crucial to select reliable service providers – when thinking about whether to trust a password strength meter or not, consider the following questions:
The aforementioned questions will help you evaluate the password strength meter. Most people avoid getting caught in the details, though – and that’s a good thing. Enter a password, enter it again to confirm it, then simply look for the green bar to appear within the password strength meter if it’s present (if the bar is red or orange-looking most software solutions won’t even let you register), and you’re good to go!
Most password strength meters operate in the following way:
That’s it! The work behind the scenes of password strength meters is not exactly rocket science – is it?
Once you see that a password strength meter is in place on a webpage, you must pass it – there’s no other way through (otherwise the website will either respond with a warning or error out as a whole) – here’s what you can do for the best chances to pass:
For the best results, don’t reuse a password you’ve used anywhere else (reused passwords are one of the primary reasons credential stuffing and identity theft attacks are so successful), and consider using a password manager too – you may want to read up and familiarize yourself with their security architecture and evaluate all of your possible options before using them though.
While password strength meters will take you far, they won’t exactly protect you from identity theft and your company – from data breaches. That’s the job of data breach search engines – the data breach search engine provided by BreachDirectory is not only able to inform you if your account has been exposed in a data breach that has happened in the past and notify you if your account appears in a data breach in the future, but it also comes with a data breach API querying capability letting you secure everyone within your company and team as well – provide the BreachDirectory API with a domain, username, email or IP address and the API will come back to you with a response that will let you identify what kind of data of yours is at risk of identity theft. The data breach search engine, on the other hand, will tell you what account of yours and as a result of what data breach could’ve fallen in the hands of hackers.
Make sure to give it a try today!
Password strength meters aren’t news to anybody – they’ve been around for a really long time, and we can confidently say that they’re here to stay at least for a while.
Not all password strength meters are made the same, but for the most part, they measure the entropy of passwords given to them – the stronger a password is (the more special characters, numbers, and letters it contains), the higher its entropy is and the greener the status bar will become. Aim to see a completely green password strength bar when using any password strength meter and you will be on the safe side – doing so might become a little difficult without a password manager like 1Password though, so consider using those and employing the features of data breach search engines and their API counterparts at the same time, and you should be good to go. Until next time!
A hacking group related to North Korea is exploiting a zero-day in the Chromium browser…
What are crypto bubbles, how do they form, and should you worry about them? Learn…
Is the crypto-engine.pro blog legit and should you trust this resource? Learn here!
Reside in Brazil and found that your Twitter account suspended? There’s a good reason for…
This blog covers the recent Black Hat USA 2024 (DEFCON 2024) conference and digs into…
The CEO of Telegram and Telegram Web, Pavel Durov, has been released from custody and…