From Very Weak to Very Strong: Analyzing Password-Strength Meters presented at NDSS 2014

by Mohammad Mannan, Xavier Carnavalet,

Summary : We analyze password-strength meters from 11 highly popular web services by reverse-engineering their functionality, and testing them against nearly 4 million passwords from common dictionaries. Our results provide prominent characteristics of these meters, and show severe inconsistencies in strength outcomes that may confuse users in choosing a stronger password.