Repository files navigation

pwd-strength-validator is a utility for evaluating the strength of passwords. It provides a customizable and easy-to-use way to validate password strength, calculate entropy, and assign scores based on predefined rules. This tool can be used independently of any frameworks or libraries, making it versatile for various applications.

The validator is based onentropy calculations andpredefined regular expression rules. These features ensure that password strength is assessed rigorously according to established security criteria.

• Demo
• Features
• Installation
• Configuration Options
• Usage
  • Basic Usage
  • Example of Customized Usage
• API
  • validatePasswordStrength
• License
• Contributing

• Entropy Calculation: Compute the entropy of the password to gauge its strength.
• Score Calculation: Assign a score to the password based on entropy and configurable parameters.
• Flexible Modes: Choose betweenstrict,regex, orscore based validation modes.
• Configurable Messages: Customize the messages displayed for different validation rules.
• TypeScript Support: Fully typed for improved development experience with TypeScript.
• 100% Test Coverage: Ensures that all code is thoroughly tested, providing high reliability and stability for the product.

npm install pwd-strength-validator

<scriptsrc="https://unpkg.com/pwd-strength-validator/dist/pwd-strength-validator.umd.js"></script><scripttype="text/javascript">constpassword:string="ZAQ!2wsx!";constresult=validatePasswordStrength(password);</script>

You can configure the hook with various options:

• maxScore:

  • Type:number
  • Description: Maximum score that can be assigned to the password.
  • Default:5

• minBestEntropy:

  • Type:number
  • Description: Minimum entropy required for a top score.
  • Default:80

• minRequiredScore:

  • Type:number
  • Description: Minimum score required for a valid password.
  • Default:3

• mode:

  • Type:"strict" | "regex" | "score"
  • Description: Validation mode. Choose from:
    • "strict": Requires both high score and specific point thresholds.
    • "regex": Requires specific point thresholds.
    • "score": Requires a minimum score to be valid.
  • Default:"strict"

• configMessages:

  • Type:IValidationMessages
  • Description: Custom validation messages for different rules. You can provide custom messages for:
    • minLowercaseMessage: Message for lowercase letter requirement.
    • minUppercaseMessage: Message for uppercase letter requirement.
    • minSpecialCharMessage: Message for special character requirement.
    • minNumberMessage: Message for number requirement.
    • minLengthMessage: Message for minimum length requirement.

Here's a basic example of how to use thevalidatePasswordStrength:

import{validatePasswordStrength}from"pwd-strength-validator";constpassword:string="ZAQ!2wsx!";constresult=validatePasswordStrength(password);console.log("Password:",result.password);console.log("Score:",result.score);console.log("Entropy:",result.entropy);console.log("Is Valid:",result.isValid);console.log("Validation Result:",result.validationResult);// result:// {//   "validationResult": [//     { "regex": /[a-z]/, "points": 26, "message": "At least 1 lowercase letter", "passed": true },//     { "regex": /[A-Z]/, "points": 26, "message": "At least 1 uppercase letter", "passed": true },//     { "regex": /[ !@#$%^&*()_+\-=[\]{};':"\\|,.<>/?~]/, "points": 33, "message": "At least 1 special character", "passed": true},//     { "regex": /[0-9]/, "points": 10, "message": "At least 1 number", "passed": true },//     { "regex": /.{8,}/, "points": 1, "message": "At least 8 characters long", "passed": true}//   ],//   "score": 3,//   "entropy": 52.67970000576925,//   "password": "ZAQ!2wsx!",//   "isValid": true// }

Here's an example of how to use thevalidatePasswordStrength with customized options:

import{validatePasswordStrength}from"pwd-strength-validator";constpassword:string="ZAQ!2wsx@1";// Keep the password at 10 charactersconstresult=validatePasswordStrength(password,{maxScore:7,// Set the maximum scoreminBestEntropy:90,// Minimum entropyminRequiredScore:4,// Minimum required scoremode:"strict",// Validation modeconfigMessages:{minLowercaseMessage:"Must include at least one lowercase letter",// Message for lowercase requirementminUppercaseMessage:"Must include at least one uppercase letter",// Message for uppercase requirementminSpecialCharMessage:"Must include at least one special character",// Message for special character requirementminNumberMessage:"Must include at least one number",// Message for number requirementminLengthMessage:"Must be at least 10 characters long",// Message for length requirement},});console.log("Password:",result.password);console.log("Score:",result.score);console.log("Entropy:",result.entropy);console.log("Is Valid:",result.isValid);console.log("Validation Result:",result.validationResult);// Expected result// {//   "validationResult": [//     { "regex": /[a-z]/, "points": 26, "message": "Must include at least one lowercase letter", "passed": true },//     { "regex": /[A-Z]/, "points": 26, "message": "Must include at least one uppercase letter", "passed": true },//     { "regex": /[ !@#$%^&*()_+\-=[\]{};':"\\|,.<>/?~]/, "points": 33, "message": "Must include at least one special character", "passed": true},//     { "regex": /[0-9]/, "points": 10, "message": "Must include at least one number", "passed": true },//     { "regex": /.{10,}/, "points": 1, "message": "Must be at least 10 characters long", "passed": true}//   ],//   "score": 4,//   "entropy": 90.25142590365954, // Entropy may vary//   "password": "ZAQ!2wsx@1",//   "isValid": true// }

• password (string): The password to be validated.

• params (optional): Configuration options for the function. You can customize validation rules, set minimum entropy, adjust the scoring system, and provide custom messages.

• validationResult (IValidationRule[]): An array of validation rules with their status. Each rule contains:

  • regex (RegExp): Regular expression used for validation.
  • points (number): Points assigned for passing the rule.
  • message (string): Message to display when the rule is not passed.
  • passed (boolean): Boolean indicating whether the rule was passed.

• score (number): The score assigned to the password based on its entropy and the configured scoring system.

• entropy (number): The entropy of the password, representing its strength and complexity.

• password (string): The current password being evaluated by the function.

• isValid (boolean): Boolean indicating whether the password meets the configured criteria.

MIT — use for any purpose. Would be great if you could leave a note about the original developers. Thanks!

If you'd like to contribute to this project, please fork the repository and submit a pull request with your changes. Make sure to follow the code style and include tests for new features or bug fixes.