The password strength checker audits entered password credentials against foundational complexity benchmarks, providing immediate feedback on character diversity, length thresholds, and overall resistance to dictionary and brute-force attacks. Inspecting password composition before setting account master keys ensures compliance with organizational password standards.

### Scoring Rubric & Evaluation Criteria

The evaluation engine awards up to 7 composite security points: - **Length Checkpoints (up to 3 points):** - $+1$ point for 8 or more characters (`length >= 8`) - $+1$ point for 12 or more characters (`length >= 12`) - $+1$ point for 16 or more characters (`length >= 16`) - **Character Diversity Checkpoints (up to 4 points):** - $+1$ point for lowercase letters (`/[a-z]/`) - $+1$ point for uppercase letters (`/[A-Z]/`) - $+1$ point for numbers (`/\d/`) - $+1$ point for punctuation and symbols (`/[^a-zA-Z0-9]/`)

### Visual Strength Ratings

The composite score maps to clear rating tiers: - 0–1 points: **Very Weak** - 2 points: **Weak** - 3 points: **Fair** - 4 points: **Good** - 5 points: **Strong** - 6 points: **Very Strong** - 7 points: **Excellent**

### Tested Scenario Example

Testing sample passphrase **`Tr0ub4dor&3#Secure!`**: 1. Length: 20 characters $\rightarrow$ earns all 3 length points ($8+, 12+, 16+$). 2. Diversity: contains lowercase (`r, u, b`), uppercase (`T, S`), numbers (`0, 4, 3`), and symbols (`&, #, !`) $\rightarrow$ earns all 4 diversity points. 3. Total Score: **7/7 points** $\rightarrow$ **Excellent**.

### In-Browser Security & Privacy Guarantee

All character evaluations execute locally in your client browser using synchronized React state and memoized regex tests. Entered passwords are never sent across the internet, logged to server databases, or cached in browser cookies.