Project description
We are reworking the registration form on our platform and need a password strength widget built from scratch. Right now people can set almost any password, including painfully weak ones like repeated digits or a single dictionary word, and support tickets about compromised accounts keep piling up as a result. We want a small component that sits under the password field and reacts instantly as someone types, without a page reload or a network round trip on every keystroke.
The core piece is a visual strength indicator: a bar or set of segments that changes color and length as the password gets stronger, scored from length, character variety, predictable patterns, and common substitutions such as swapping a letter for a similar-looking digit. Next to it we need short hints explaining what would make the password stronger, but these must never quote or echo the entered characters, and nothing about the string should ever land in a browser console or a request log.
The second half is refusing passwords already known from public breach collections, either via a compact local dictionary bundled with the widget, or a check against an external list using partial hash comparison so the full password is never sent anywhere.
What we need:
— Debounced real-time evaluation with no lag while typing
— Clear accessible states such as weak, fair and strong, marked by text as well as color
— A short integration guide for a standard HTML form
— Brief technical notes on the scoring logic
The core piece is a visual strength indicator: a bar or set of segments that changes color and length as the password gets stronger, scored from length, character variety, predictable patterns, and common substitutions such as swapping a letter for a similar-looking digit. Next to it we need short hints explaining what would make the password stronger, but these must never quote or echo the entered characters, and nothing about the string should ever land in a browser console or a request log.
The second half is refusing passwords already known from public breach collections, either via a compact local dictionary bundled with the widget, or a check against an external list using partial hash comparison so the full password is never sent anywhere.
What we need:
— Debounced real-time evaluation with no lag while typing
— Clear accessible states such as weak, fair and strong, marked by text as well as color
— A short integration guide for a standard HTML form
— Brief technical notes on the scoring logic
Other / Miscellaneous Cash, Bank transfer
