var PasswordTester = {
setup: function ()
{
// these attributes will be available after PasswordTester is init'd
// 0=invalid,0=very weak,1=weak,2=medium,3=strong,4=very strong
this.strengthLevel = null;
this.advice = null;
this.passwordEntered = document.getElementById( 'test_password' ).value;
this.strengthIndicator = document.getElementById( 'passwordStrength' );
this.passwordAnalysis = document.getElementById( 'passwordAnalysis' );
this.indicatorClasses = new Array( "invalid", "veryweak", "weak", "medium", "strong", "verystrong" );
this.analysisAdvice = new Array(
"Please enter a password in the box above, then click the 'Test Password' button.",
"You entered a very weak password. Passwords with four or fewer characters provide very little protection and could be easily guessed. even by a casual attacker.",
"You entered a weak password. While this provides more protection than shorter passwords, a novice hacker with a few tools could quickly brute force your password.",
"You entered a medium strength password. This password provides the minimum recommended amount of protection. Consider adding more characters to reduce the risk of brute force attacks.",
"You entered a strong password. Longer passwords are even more secure, and should include a mixture of mixed-case letters, numbers and special characters.",
"You entered a very strong password. Long passwords containing a mix of letters, numbers and special characters provide the best protection against hackers and password thieves."
);
},
meetsMinStds: function (pWord)
{
var re = /(?=.*\d)(?=.*[a-z])(?=.*[A-Z])/;
return re.test(pWord);
},
indexInArray: function (arr, val)
{
for(var i=0;i-1)
return true;
else
return false;
},
contains: function (arr, val)
{
for(var i = 0; i < arr.length; i++)
if(arr[i] === val)
return true;
return false;
},
countUniqueChars: function (val)
{
var seenChars = new Array();
if( ! val || val.length < 1 )
return 0;
for( i = 0; i < val.length; i++ )
{
if( ! this.contains( seenChars, val.substring(i,i+1) ) )
seenChars.push( val.substring(i,i+1) );
}
return seenChars.length;
},
hasSpecialChars: function (pWord)
{
var reSpecial = /[!@#$%^&*?~]/;
return reSpecial.test(pWord);
},
SubstituteMap: function ()
{
this.characters = new Array ("e","s","s","g","t","b","l","g","t","a","o","l","z","i","i");
this.substitutions = new Array ("3","5","$","6","7","8","|","9","+","@","0","1","2","!","1") ;
// lookup character substitution
this.subLookup = function(in_substitute)
{
var subCharacter = 0;
var index = -1;
for(var i=0;i= 0)
{
subCharacter = this.characters[index];
} else {}
return subCharacter;
}
},
getSubWord: function (pWord)
{
var subMap = new this.SubstituteMap ();
var charSub = 0; //character substitution
var subWord = ""; //new word with char susbtitutions
var length = 0;
if ((pWord != null) && (pWord.length > 0))
{
subWord = pWord.toLowerCase ();
length = subWord.length;
for (var index = 0; index < length; index++){
// LookUp the character substitution
charSub = subMap.subLookup (subWord.charAt(index));
if (charSub != 0){
//change the letters to common substitutions
subWord = subWord.substring (0, index) + charSub + subWord.substring (index + 1, length);
}
else {}
}
}
else {}
return subWord;
},
test: function ()
{
if ( (this.passwordEntered==null) || (this.passwordEntered.length == 0))
{
this.strengthLevel = 0; //invalid
}
// very strong - Length >=24, 3 or more unique chars, really long password
else if ( this.passwordEntered.length >= 24 && this.countUniqueChars( this.passwordEntered ) >= 3 )
{
this.strengthLevel = 5;
}
// strong - Length >=16, 3 or more unique chars, long password
else if ( this.passwordEntered.length >= 16 && this.countUniqueChars( this.passwordEntered ) >= 3 )
{
this.strengthLevel = 4;
}
// very strong - Length >=8, meets minimum standards, has special characters and not found in dictionary
else if ( (this.passwordEntered.length > 8) && (this.meetsMinStds (this.passwordEntered)) && (this.hasSpecialChars (this.passwordEntered)) && (!this.DictionaryLookup(this.passwordEntered)) )
{
this.strengthLevel = 5;
}
// strong - Length >=6, meets minimum standards, has special characters and not found in dictionary
else if ( ( ( (this.passwordEntered.length > 6 ) && (this.passwordEntered.length <= 8)) && (this.meetsMinStds (this.passwordEntered)) && (this.hasSpecialChars (this.passwordEntered)) && (!this.DictionaryLookup(this.passwordEntered)) ))
{
this.strengthLevel = 4;
}
// medium - Length >=6, meets minimum standards and not found in dictionary
else if ( (this.passwordEntered.length >= 6) && (this.meetsMinStds (this.passwordEntered)) && (!this.DictionaryLookup(this.passwordEntered)) )
{
this.strengthLevel = 3;
}
// weak - Length >=6, meets minimum standards and found in dictionary or has a letter/number/qwerty sequence
else if ( (this.passwordEntered.length >= 6) && (this.meetsMinStds (this.passwordEntered)) && (this.DictionaryLookup(this.passwordEntered)) )
{
this.strengthLevel = 2;
}
//very weak - Length < 6 or Length >= 6 but does not meet mininum standards
else if ( (this.passwordEntered.length <6) || ( (this.passwordEntered.length >= 6) && (!this.meetsMinStds (this.passwordEntered))) )
{
this.strengthLevel = 1;
}
},
advise: function ()
{
this.strengthIndicator.className = this.indicatorClasses[this.strengthLevel];
this.passwordAnalysis.innerHTML = this.analysisAdvice[this.strengthLevel];
},
main: function ()
{
this.setup();
this.test();
this.advise();
}
};