Security Tools

Password Policy Compliance Checker

Enter a password and configure a policy (minimum length, character types required) to check compliance.

Does not meet policy
  • At least 12 characters
  • Contains an uppercase letter
  • Contains a lowercase letter
  • Contains a digit
  • Contains a symbol

Modern guidance (like NIST SP 800-63B) actually favors length over complexity rules — a long passphrase is often both stronger and easier to remember than a short, complex-but-crackable password.

How to use this tool

  1. 1Enter a password.
  2. 2Configure the policy requirements.
  3. 3See which requirements pass or fail.

Frequently asked questions

Are complexity rules the best way to enforce strong passwords?+

Not necessarily — NIST SP 800-63B and similar modern guidance favor length (and checking against known-breached password lists) over forced complexity rules, which often just push people toward predictable patterns.