Password Checker Snippet

[sandman]

Here's a little snippet I made from an algorithm. Look in the code for the algorithm, I am aware that it is simple, but I realized earlier that I knew virtually nothing about regular expressions and wanted to get to know them a bit more. After playing around a bit to make it fair (on my first try, the password 'a' was 'You call that a password?', yet 'a1' was 'Good', the best rating.)

The ratings are:

- You call that a password? You shouldn't trust this password for anything.

- Fair Meh, any average computer user would have to spend a long time guessing this.

- Normal It'll keep your parents away, unless they have the tools to bruteforce the password.

- Good Your password is worthy of trust!

- Very Good The best, obviously.

And finally, the code:

expandcollapse popup

#cs
-- Check Password Strength --

All results add or subtract from the final score. The score is then calculated to a level of Fair, Normal, and Good.

Password length: += length * 2
Amount of numbers: += amt * 2
Alphanumeric: += 10
Non-alphanumeric: -= 10

#ce

#include <GUIConstants.au3>

$win = GUICreate("Password Checker", 293, 113, 193, 115)
$prompt = GUICtrlCreateLabel("Enter a password to check:", 75, 10, 134, 17)
$pwd = GUICtrlCreateInput("", 10, 30, 270, 21, BitOR($ES_PASSWORD,$ES_AUTOHSCROLL))
Global $lbl = GUICtrlCreateLabel("No Password Entered", 90, 70, 293, 17)
GUISetState(@SW_SHOW)

While 1
    Dim $strength = ""
    $read = GUICtrlRead($pwd)
    ; Length
        $strength += StringLen($read) * 2
    ; Amount of numbers
        $numexp = StringRegExp($read, "[123456789]", 3)
        If IsArray($numexp) Then
            $strength += UBound($numexp) * 2
        EndIf
    ; Check alphanumeric
        $abcexp = StringRegExp($read, "[abcdefghijklmnopqrstuvwxyz]", 3)
        If IsArray($numexp) And IsArray($abcexp) Then
            $strength += 10
        Else
            $strength -= 10
        EndIf
    ; Check special characters
        $specexp = StringRegExp($read, "[`~!@#$%^&*_+=;':""]", 3)
        If IsArray($specexp) Then
            $strength += 10
        EndIf
    If $strength > 0 And $strength < 15 Then
        GUICtrlSetData($lbl, "Fair")
    ElseIf $strength >= 15 And $strength < 30 Then
        GUICtrlSetData($lbl, "Normal")
    ElseIf $strength >= 30 And $strength < 45 Then
        GUICtrlSetData($lbl, "Good")
    ElseIf $strength >= 45 Then
        GUICtrlSetData($lbl, "Very Good")
    ElseIf $strength < 0 Then
        GUICtrlSetData($lbl, "You call that a password?")
    EndIf
    $nMsg = GUIGetMsg()
    Switch $nMsg
        Case $GUI_EVENT_CLOSE
            Exit
    EndSwitch
    Sleep(100)
WEnd

Update: I added the little meter pictures. 4 GIFs to go with the ratings now. This EXE is decompilable, if anyone doesn't trust me

P.S. There's no password for decompilation, just leave it blank.

PasswordStrength.exe (434.1K) Number of downloads:

Edited August 23, 2007 by sandman

[jvanegmond]

Funny, it rates Good even though there are no $%# signs in it.. I always thought that was required to make an exceptionally strong password.

[sandman]

Funny, it rates Good even though there are no $%# signs in it.. I always thought that was required to make an exceptionally strong password.

Well many sites and applications don't allow special characters so I didn't include that. I'll add it, though, hold on.

Okay, now there's also a 'Very Good' option.

Edited July 27, 2007 by sandman

[jvanegmond]

Awesome.

It might be a bit more leanient. It requires a 10 character long password including @#$ and caps and non-caps?

[sandman]

Anyone else?

[BrettF]

This is pretty cool . Awesome job.

[James]

Nifty

I could use this alot

[sandman]

This can be used in web-based scripts on registration forms, stuff like that. Feel free to use it as long as you give me some kind of credit, whether it's in the code, or in the About section, I don't care.

[cramaboule]

Wow,

but does it consider the Capital letters as Well ?

[sandman]

No, I didn't mean it to, but according to Manadar it does. Hold on, I'll test it out.

[sandman]

Oops, here's a bug with the new EXE: Enter a password that gets a very good rating, then delete it.

Some glitch with GUICtrlSetImage, I think, because after the bug presents itself if you minimize, then maximize the window, it'll go back to normal.

Also, does anyone know who hosts trashbin.nfshost.com? If so, I'd like to request to take the hoster's IP address off the download page.. that's kind of confidential.

Edited July 28, 2007 by sandman

[BinaryBrother]

A 24 character Alpha-numeric password shows 'Very Good' lol...

[sandman]

A 24 character Alpha-numeric password shows 'Very Good' lol...

Well it should, shouldn't it?

I think that's a fair rating for that type of password.

[James]

Feel free to use it as long as you give me some kind of credit, whether it's in the code, or in the About section, I don't care.

I meant that I could use it for password creation, when I signup for something new

[Infinitex0]

hmmm, I have some very weak passwords. Nice script

[FuryCell]

Nice Job. Just tried it on some of my passwords.

A little suggestion though. If you replace the following code the gui will not flicker anymore.

If $strength > 0 And $strength < 15 Then
        GUICtrlSetData($lbl, "Fair")
    ElseIf $strength >= 15 And $strength < 30 Then
        GUICtrlSetData($lbl, "Normal")
    ElseIf $strength >= 30 And $strength < 45 Then
        GUICtrlSetData($lbl, "Good")
    ElseIf $strength >= 45 Then
        GUICtrlSetData($lbl, "Very Good")
    ElseIf $strength < 0 Then
        GUICtrlSetData($lbl, "You call that a password?")
    EndIfoÝ÷ Ù«­¢+Ø%ÀÌØíÍÑÉ¹Ñ ÐìÀ¹ÀÌØíÍÑÉ¹Ñ ±ÐìÄÔQ¡¸(%Õ¥
ÑɱI ÀÌØí±°¤±ÐìÐìÅÕ½Ðí¥ÈÅÕ½ÐìÑ¡¸U%
ÑɱMÑÑ ÀÌØí±°°ÅÕ½Ðí¥ÈÅÕ½Ðì¤(±Í%ÀÌØíÍÑÉ¹Ñ ÐìôÄÔ¹ÀÌØíÍÑÉ¹Ñ ±ÐìÌÀQ¡¸(%Õ¥
ÑɱI ÀÌØí±°¤±ÐìÐìÅÕ½Ðí9½Éµ°ÅÕ½ÐìÑ¡¸U%
ÑɱMÑÑ ÀÌØí±°°ÅÕ½Ðí9½Éµ°ÅÕ½Ðì¤(±Í%ÀÌØíÍÑÉ¹Ñ ÐìôÌÀ¹ÀÌØíÍÑÉ¹Ñ ±ÐìÐÔQ¡¸(%Õ¥
ÑɱI ÀÌØí±°¤±ÐìÐìÅÕ½Ðí½½ÅÕ½ÐìÑ¡¸U%
ÑɱMÑÑ ÀÌØí±°°ÅÕ½Ðí½½ÅÕ½Ðì¤(±Í%ÀÌØíÍÑÉ¹Ñ ÐìôÐÔQ¡¸(%Õ¥
ÑɱI ÀÌØí±°¤±ÐìÐìÅÕ½ÐíYÉä½½ÅÕ½ÐìÑ¡¸U%
ÑɱMÑÑ ÀÌØí±°°ÅÕ½ÐíYÉä½½ÅÕ½Ðì¤(±Í%ÀÌØíÍÑÉ¹Ñ ±ÐìÀQ¡¸(%Õ¥
ÑɱI ÀÌØí±°¤±ÐìÐìÅÕ½Ðíe½Ô±°Ñ¡ÐÁÍÍݽÉüÅÕ½ÐìÑ¡¸U%
ÑɱMÑÑ ÀÌØí±°°ÅÕ½Ðíe½Ô±°Ñ¡ÐÁÍÍݽÉüÅÕ½Ðì¤(¹%

[mrbond007]

Here's a little snippet I made from an algorithm. Look in the code for the algorithm, I am aware that it is simple, but I realized earlier that I knew virtually nothing about regular expressions and wanted to get to know them a bit more. After playing around a bit to make it fair (on my first try, the password 'a' was 'You call that a password?', yet 'a1' was 'Good', the best rating.)

The test is too weak, i have already created a real strong password maker/tester here. You should make your's like this one

[Skrip]

Eehh...It's okay. But it rated 125793256482 as good. I think that's a Very good.