[[File:SecurityReports-PasswordStrength_002.png|800px]]
= Update =
As of 2016-06-28, the Google API wasn't available which caused the bxp reporting to not display correctly.
To prevent this occurence and also remove dependence on an external service we've implemented a security engine based on the following stack overflow discussion.
http://stackoverflow.com/questions/75057/what-is-the-best-way-to-check-the-strength-of-a-password
So now the rule for providing the 1 to 4 rating is:
* If > 8 characters, 1 point
* If Upper and lower characters, 1 point
* If letters and at least 1 number, 1 point
* If special character, 1 point
* If a pass phrase, i.e. longer than 25 characters, instant 4 points
* If 0 points, then, round up to 1 for a weak password.
Whilst far from perfect it does provide a reasonable approximation of the results.
[[Category:Topic:Security]]