---
path: faq/password-complexity-criteria.mdx
title: Password strength criteria
slug: password-complexity-criteria
description: >-
  The password strength scoring algorithm used in the Passwork security
  dashboard: points for length, letters, digits, special characters, and the
  resulting strength ranges.
keywords:
  - Passwork
  - security
  - password
  - password strength
  - security dashboard
---

## Security dashboard. Password strength criteria

The password strength scoring algorithm:

```text
Password length:
    5 points:  Fewer than 4 characters
    10 points: From 5 to 7 characters
    25 points: 8 characters or more

Letters:
    0 points:  No letters
    10 points: All letters in lower case
    20 points: Letters in both upper and lower case

Digits:
    0 points:  No digits
    10 points: 1 digit
    20 points: 3 digits or more

Special characters:
    0 points:  No special characters
    10 points: 1 special character
    25 points: More than 1 special character

Bonus:
    2 points: Letters and digits present
    3 points: Letters of one case, digits and special characters present
    5 points: Letters of both cases, digits and special characters present

Password Text Range:
    >= 90: Very secure
    >= 80: Secure
    >= 70: Very strong
    >= 60: Strong
    >= 50: Medium
    >= 25: Weak
    >= 0:  Very weak
```

**Outdated or expired passwords:** passwords older than 6 months are considered outdated or expired.

**Passwords at risk:** the "Risk" category includes passwords that a user had access to before that access was revoked. Such a password is considered compromised and has to be changed.