Password Strength & Crack-Time Estimator

{
  "type": "object",
  "required": [
    "password"
  ],
  "properties": {
    "password": {
      "type": "string",
      "description": "The password to analyze."
    }
  },
  "additionalProperties": false
}

{
  "type": "object",
  "properties": {
    "score": {
      "type": "number",
      "description": "0-100 per the endpoint's own documented range. Observed 65 and 100."
    },
    "issues": {
      "type": "array",
      "items": {
        "type": "string"
      },
      "description": "Specific problems found, e.g. 'This is a commonly used password'. Observed as an empty array on a strong password and a single entry on a weak, commonly used one."
    },
    "length": {
      "type": "number",
      "description": "Character length of the submitted password."
    },
    "strength": {
      "type": "string",
      "description": "A strength label. Observed 'strong' and 'very_strong'; the endpoint's own description implies a 'weak' (and likely intermediate) label also exists but was not observed in either real fixture."
    },
    "suggestions": {
      "type": "array",
      "items": {
        "type": "string"
      },
      "description": "Concrete suggestions to strengthen the password. Observed as an empty array on a strong password and several entries on a weak one."
    },
    "entropy_bits": {
      "type": "number",
      "description": "Estimated entropy in bits. Observed 36.05 and 80.71."
    },
    "character_classes": {
      "type": "object",
      "properties": {
        "count": {
          "type": "number",
          "description": "How many of the four classes above are present."
        },
        "digits": {
          "type": "boolean"
        },
        "special": {
          "type": "boolean"
        },
        "lowercase": {
          "type": "boolean"
        },
        "uppercase": {
          "type": "boolean"
        }
      },
      "description": "Which character classes the password uses, plus a count of distinct classes.",
      "additionalProperties": true
    },
    "crack_time_estimate": {
      "type": "string",
      "description": "Human-readable estimated time to crack, e.g. '152 days', 'millions of years'."
    }
  },
  "description": "The password strength result, as returned at routing.responseResultPath ($.output).",
  "additionalProperties": true
}