Password strength criteria

Security dashboard. Password strength criteria

The password strength scoring algorithm:

Password length:
    5 points:  Fewer than 4 characters
    10 points: From 5 to 7 characters
    25 points: 8 characters or more

Letters:
    0 points:  No letters
    10 points: All letters in lower case
    20 points: Letters in both upper and lower case

Digits:
    0 points:  No digits
    10 points: 1 digit
    20 points: 3 digits or more

Special characters:
    0 points:  No special characters
    10 points: 1 special character
    25 points: More than 1 special character

Bonus:
    2 points: Letters and digits present
    3 points: Letters of one case, digits and special characters present
    5 points: Letters of both cases, digits and special characters present

Password Text Range:
    >= 90: Very secure
    >= 80: Secure
    >= 70: Very strong
    >= 60: Strong
    >= 50: Medium
    >= 25: Weak
    >= 0:  Very weak

Outdated or expired passwords: passwords older than 6 months are considered outdated or expired.

Passwords at risk: the "Risk" category includes passwords that a user had access to before that access was revoked. Such a password is considered compromised and has to be changed.