Entropy Guard

Abstract

1. Introduction

A simple, transparent password strength checker built with Node.js

This tool evaluates password strength using zxcvbn — a pattern-aware strength estimator — with a strong focus on privacy, clarity, and auditability.

This produces a score from 0–4 and a log₁₀ guesses estimate that reflects real-world crackability — not just theoretical character-set size.

2. Objective

A simple, transparent password strength checker

This project demonstrates how JavaScript can be applied to a real-world Cybersecurity & Ethical Hacking problem.

3. Key Features / Modules

• Pattern-aware strength analysis via zxcvbn
• Real-time password analysis
• Strength classification (Very Weak → Very Strong)
• Time-to-crack estimation (offline GPU vs online attack models)
• Contextual feedback and suggestions
• Visual strength meter (real-time UI feedback)
• Password visibility toggle
• No password storage or logging
• Clean and readable codebase for easy auditing

4. Technology Stack

5. System Requirements

General requirements for this technology stack — check the README for exact versions.

• Node.js (LTS) and npm
• A modern web browser
• VS Code or any code editor
• Git (to clone the repository)

6. Installation & Setup

git clone https://github.com/aiadam36/EntropyGuard.git
cd EntropyGuard

1. Open the client UI
2. Enter a password
3. View strength, crack time, and suggestions in real-time

npm install

npm start

http://localhost:3000

Full setup instructions are in the project README.

7. Future Enhancements

Suggested extensions you can add to make this your own project.

• Add logging and alert notifications (email / Telegram)
• Write a threat model document for the tool
• Package it with Docker for safe lab testing

8. Viva / Review Questions

Common questions examiners ask for projects in this domain.

1. Which threat or attack does this project defend against?
2. What detection or protection technique is used and what are its limits?
3. How are false positives and false negatives handled?
4. Which cryptographic algorithms or security standards are involved?
5. What legal and ethical rules apply when testing a tool like this?

9. Source Code & License

This project is developed by aiadam36 and published on GitHub under the MIT License. Please follow the license terms and credit the original author when you use or modify this code.