All projects

security

A password checker that never sends the password

Build a tool that scores password strength and checks whether one has leaked, without ever sending the password.

beginnerPython~12h

Why it matters

Security roles screen for whether you think about what leaves the machine. Implementing a k-anonymity range query is a small, concrete answer to that question and it is memorable in an interview.

What you build

  • An entropy-based strength score with clear feedback
  • A k-anonymity range query against a breach corpus
  • Hashing that never transmits the password itself
  • A command-line interface with readable output

If you want more

  • Passphrase generation
  • A browser extension front end

Build it 5 steps

  • Character-class rules reward P@ssw0rd1 and punish four random words. Entropy does not.

Material for the whole build

Shows applied cryptographic thinking and a real privacy-preserving protocol, not just a regex over password rules.

Get a plan built around projects like this