Create a password

Check Password Strength

➠ http://rumkin.com/tools/password/passchk.php
— Calculating Password Entropy Explanation
— An Analysis of 10 Million Passwords
➠ https://lowe.github.io/tryzxcvbn/
— Note This is the correct Dropbox link : zxcvbn: realistic password strength estimation
➠ https://www.security.org/how-secure-is-my-password/
➠ http://www.passwordmeter.com/
➠ https://password.kaspersky.com/
➠ http://password-checker.online-domain-tools.com/
➠ https://www.grc.com/haystack.htm
➠ MD5 conversion and MD5 reverse lookup

Latin Words (Latin-English)

➠ https://www.math.ubc.ca/~cass/frivs/latin/latin-dict-full.html

Database and code

➠ Download Latin words as sqlite database file
➠ Simplified password display
➠ PHP code of simplified password display

Silly passwords

The sqlite database also contains ca 8000 passwords based on the 10.000 most used passwords.

➠ https://en.wikipedia.org/wiki/Wikipedia:10,000_most_common_passwords
➠ Simplified password display

More silly passwords

This government page of the National Cyber Security Center has a download link to a 100k password file.

➠ Passwords, passwords everywhere

I cleaned the file to contain 34k easy to pronounce words.
As a bonus I added 57535 Dutch Scrabble words.
The sqlite database was updated.

➠ Download the sqlite database (1.9MB)

Demo Register/Signup Form

Instead of letting the user create a password when signing up for your service, do it for him.
Here's a sample signup form that suggests a password and allows him to copy the password to the clipboard.
Then it shows how it is processed on the server.

Since this is experimental, it may not work with older browsers.
But you can hide/show the password and then copy the text.

➠ Demo Register Form
➠ Download Register Form zip file

Ultra strength password

Write a short story (max. 500 characters) and use it as a password.
Most likely it will get rejected, but it shows that anything can be used as a password.

➠ Try it

It appears that the recommended maximum inputlength is 50 ASCII characters.
Beyond that, the result is unpredictable ➠ Does bcrypt have a maximum password length?

To edit the database

➠ sqlitebrowser (Desktop application)
➠ phpLiteAdmin (Web application)

A little learning about password hacking

➠ How to Crack a Password like a Hacker
➠ How to Crack a Password

Secure Salted Passwords

➠ Salted Password Hashing - Doing it Right
➠ Password Salt demo

Let's crack a password

You've read about those high-powered PCs cracking stolen passwords.

This website isn't high-powered, so we take it easy.

Click the link. On that page enter a single character, a-z or A-Z, to create a hash. Copy the password hash.

➠ Hash password

Now go to this page and paste the hash in the field. Hit the 'hack' button.

➠ Guess (Hack) my password

You will find more 'passwords' in the source of the page.