zxcvbn-ts/zxcvbn

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

1204 stars · 91 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A TypeScript rewrite of Dropbox's zxcvbn password strength estimator that scores passwords based on pattern matching against common passwords, dictionary words, keyboard patterns, and other weak patterns. It provides strength scores, verbal feedback, i18n support, and extensible custom matchers.

Use cases

• estimate password strength in a signup form
• replace LUDS password complexity rules with a smarter score
• give users instant feedback on weak passwords
• check passwords against common leaked password patterns
• add localized password feedback in multiple languages
• add custom dictionary matchers for password checking

When to choose

• you need client-side password strength estimation in a JavaScript/TypeScript app
• you want an algorithmic alternative to rigid password composition policies
• you need i18n support for password feedback and dictionaries
• you want to extend matching with custom dictionaries or API-based matchers

When to avoid

• you need server-side password strength checking in a non-JS backend
• you need actual password cracking or entropy auditing rather than estimation
• you cannot ship the dictionary packages due to bundle size constraints

Facets

library · maturity active

security developer-tools internationalization security web-development frontend developer-tools browser cross-platform password-strength zxcvbn password-estimation form-validation typescript nodejs

Member repositories

For agents

markdown · JSON · MCP: product_card(name="zxcvbn-ts/zxcvbn")