I'm making an alternative to Roboform's How Secure is my Password

How Secure is My Password example

with Dropbox's zxcvbn.

A cool feature of zxcvbn is that it not only returns the amount of time required for cracking the password offline with the hash, but also returns an estimated time for brute forcing it online. How can I show my (probably) nontechnical users the difference between these two stats without a long text explanation?

  • It depends on your users, but I'd argue most won't care and it will be relatively meaningless.
    – DA01
    Commented Nov 3, 2015 at 17:39

1 Answer 1


Just display your reply based on shortest of the two metrics. And, for those who will be interested in how you calculated it or won't trust you, add a link to detailed explanation/numbers.

Ideally an explanation that nontechnical users will find interesting/funny. For example I would appreciate explanation whether it really will be cracked in today's world or whether it's actually "can be cracked".

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.