Give it a username and a password, and it will check if the password is secure enough, based on different tests. It performs various checks based on the similarity of the given user name and password (even phonetic tests, soundex and metaphone), search the password on the given common-passwords file, minimum size check, and only-numbers check.
It's fully configurable, you can specify it not to perform some checks if you want.
It returns true if the password is secure, but it can also returns a full report specifying the results of the checks.
When you’re in charge of a Web application’s account registration and maintenance section, there are two things you can do to reduce the danger of user passwords being easily guessed via brute force attacks...