# Cek Sandi

> Password strength checker using zxcvbn algorithm

- **Year**: 2024
- **Platforms**: web
- **Tools**: [Next.js](https://nextjs.org), [zxcvbn](https://wastu.net/experiments/ceksandi/tools/zxcvbn), Cloudflare Pages
- **Links**: [GitHub](https://github.com/bgwastu/ceksandi), [Visit the website](https://ceksandi.wastu.net)

I built this password strength checker to give awareness to people and developers about proper password rules. The goal? So we don't end up with more entries on [dumbpasswordrules.com](https://dumbpasswordrules.com/).

# What makes it different

Most password checkers are simplistic. Uppercase, lowercase, numbers, symbols, done. Cek Sandi uses the [zxcvbn algorithm](https://www.usenix.org/conference/usenixsecurity16/technical-sessions/presentation/wheeler), the same tool security professionals use. It analyzes common words, keyboard patterns, and predictable substitutions to show how resistant your password actually is to cracking attempts.

# Features

- Accurate strength analysis using zxcvbn algorithm
- Tips for creating strong passwords (passphrases, not just random characters)
- Open source, you can inspect the code and verify its security
- Focused on Indonesian users with localized tips

#### Why I used zxcvbn in Cek Sandi

I liked [zxcvbn](https://github.com/zxcvbn-ts/zxcvbn) because it considers common words and predictable patterns when judging a password. Adding an Indonesian dictionary also made sense to me for the people I wanted Cek Sandi to reach.