Modern password guidance without false certainty
v10.77 keeps password/passphrase generation and review browser-local while shifting guidance toward length, uniqueness, common-password blocking, password-manager compatibility, MFA, and compromise-driven changes rather than arbitrary composition rules or guaranteed crack-time claims.
Security boundary
A local meter can flag obvious patterns but cannot prove that a password is safe, unused elsewhere, or absent from every breach corpus. Do not paste sensitive production password exports into batch tools; generate unique secrets locally and store them in an appropriate password manager.
Build a validation regex
Select length and composition requirements to create a JavaScript-compatible regular expression, then try a sample password against it.
Validation is not strength measurement
A regex can enforce syntax such as minimum length or required character classes, but it cannot prove that a password is unique, random, uncompromised, or resistant to guessing.