Analyzing a Weak Password
This example shows how zxcvbn breaks down a typical weak password. “password123” combines a dictionary word with a sequential digit pattern, two of the most predictable structures attackers target first.
What You Will See
- Score: 0 (Very Weak) - The password appears in breach databases and is trivially guessable
- Crack time: instant - Offline attacks can try billions of passwords per second
- Patterns detected: Dictionary word “password”, sequential digits “123”
- Entropy: ~24 bits - Far below the 80+ bits needed for meaningful security
How to Use
- The password “password123” is pre-filled in the analyzer
- Review the strength meter and crack time estimates
- Check the Detected Patterns section to see which weaknesses zxcvbn found
- Click “Check if compromised” to see how many times this password has appeared in data breaches
- Try changing one character at a time to see how the score changes