PasswordStrength
The estimator’s verdict. Returned by estimateStrength.
Properties
Section titled “Properties”effectiveLength
Section titled “effectiveLength”effectiveLength: number;Length after collapsing runs and repeats — what the entropy is based on.
entropy
Section titled “entropy”entropy: number;Estimated bits of entropy after penalties. Not a security guarantee — an offline-attack cost model would need the attacker’s wordlist, which no client-side estimator has. Treat it as a comparator, not a measurement.
penalties
Section titled “penalties”penalties: PasswordPenaltyCode[];Machine-readable reasons the score is not higher. Ordered by impact.
score: PasswordScore;0–4 bucket.