Skip to content

EstimateStrengthOptions

blocklist?: string[];

Extra low-entropy strings to reject, e.g. your product name.


minLength?: number;

Length below which too-short is reported and the score is capped.

8

userInputs?: string[];

Email, username, display name — anything the attacker already knows.