Download the PHP package double-star-systems/zxcvbn-symfony without Composer
On this page you can find all versions of the php package double-star-systems/zxcvbn-symfony. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.
Download double-star-systems/zxcvbn-symfony
More information about double-star-systems/zxcvbn-symfony
Files in double-star-systems/zxcvbn-symfony
Package zxcvbn-symfony
Short Description Password strength validator for Symfony framework. Based on Dropbox's zxcvbn project.
License MPL-2.0
Informations about the package zxcvbn-symfony
Zxcvbn Symfony Bundle
Password strength constraint for Symfony validator component. Based on the zxcvbn project from Dropbox and @lowe, this is using zxcvbn-php under the hood for password strength estimation.
zxcvbn attempts to give sound password advice through pattern matching and conservative entropy calculations. It finds 10k common passwords, common American names and surnames, common English words, and common patterns like dates, repeats (aaa), sequences (abcd), and QWERTY patterns.
Installation
The library can be installed with Composer by adding it as a dependency to your composer.json file.
Usage
The constrint can be attached to an entity field using an annotation.
You may simply use the simpler @PasswordStrength(3)
form for a minimum
password score of 3
, if you don't need a custom message.
More information on validation with Symfony validator can be found in
the documentation.
Alternatively, the constraint can be added directly to form fields.
Score
The score is an integer from 0-4 (you can mentally represent it as a strength bar)
0
too guessable: risky password. (guesses < 10^3)1
very guessable: protection from throttled online attacks. (guesses < 10^6)2
somewhat guessable: protection from unthrottled online attacks. (guesses < 10^8)3
safely unguessable: moderate protection from offline slow-hash scenario. (guesses < 10^10)4
very unguessable: strong protection from offline slow-hash scenario. (guesses >= 10^10)
License
This Source Code Form is subject to the terms of the Mozilla Public
License, v. 2.0. If a copy of the MPL was not distributed with this
file, You can obtain one at http://mozilla.org/MPL/2.0/.
See the complete license.
This project is a fork of Mathieu Darse's Password Strength Validator which is no longer in active development.