Security Audit - Check Password Strength

Security Audit Tool

What is Security Audit?

Security Audit analyzes all your stored passwords to identify weak, reused, or compromised credentials.

Running a Security Audit

1. Navigate to Security Audit in the menu
2. Click "Run Audit"
3. Wait for analysis to complete (may take 1-2 minutes)
4. Review the results

Audit Results Categories

• 🔴 Weak Passwords: Passwords that don't meet security requirements
  • Too short (< 8 characters)
  • Missing character types
  • Common passwords (password123, qwerty, etc.)
• 🟡 Reused Passwords: Same password used on multiple sites
• 🔴 Breached Passwords: Passwords found in data breaches (checked against 800M+ breached passwords via Have I Been Pwned)
• 🟢 Strong Passwords: Passwords meeting all security criteria

How Password Breach Checking Works

We use the Have I Been Pwned (HIBP) Pwned Passwords API:

• Privacy Protected: Your password never leaves your device
• k-Anonymity: Only the first 5 characters of the password hash are sent
• 800M+ Breached Passwords: Comprehensive breach database
• No API Key Required: For password checking (free)

Taking Action

For each flagged password:

1. Click on the record to view details
2. Generate a new strong password
3. Update the password on the actual website
4. Save the new password in your vault
5. Re-run audit to verify improvement