Em resumo, podemos fazer nosso próprio score para verificar se ela é "fraca", "média", "forte" ou até mesmo "não atende ao mínimo requerido". Tenho código em javascript que demonstra a pontuação em forma de score e conforme pontua vai mostrando a "força" que a senha possui. <!-- language: lang-js --> $(document).ready(function() { var strPassword=0; var charPassword=0; var complexity = $("#complexity"); var minPasswordLength = 8; var baseScore = 0, score = 0; var num = {}; num.Excess = 0; num.Upper = 0; num.Numbers = 0; num.Symbols = 0; var bonus = {}; bonus.Excess = 3; bonus.Upper = 4; bonus.Numbers = 5; bonus.Symbols = 5; bonus.Combo = 0; bonus.FlatLower = 0; bonus.FlatNumber = 0; outputResult(); $("#inputPassword").bind("keyup", checkVal); function checkVal() { init(); if (charPassword.length >= minPasswordLength) { baseScore = 50; analyzeString(); calcComplexity(); } else { baseScore = 0; } outputResult(); } function init() { strPassword= $("#inputPassword").val(); charPassword = strPassword.split(""); num.Excess = 0; num.Upper = 0; num.Numbers = 0; num.Symbols = 0; bonus.Combo = 0; bonus.FlatLower = 0; bonus.FlatNumber = 0; baseScore = 0; score =0; } function analyzeString () { for (i=0; i<charPassword.length;i++) { if (charPassword[i].match(/[A-Z]/g)) {num.Upper++;} if (charPassword[i].match(/[0-9]/g)) {num.Numbers++;} if (charPassword[i].match(/(.*[!,@,#,$,%,^,&,*,?,_,~])/)) {num.Symbols++;} } num.Excess = charPassword.length - minPasswordLength; if (num.Upper && num.Numbers && num.Symbols) { bonus.Combo = 25; } else if ((num.Upper && num.Numbers) || (num.Upper && num.Symbols) || (num.Numbers && num.Symbols)) { bonus.Combo = 15; } if (strPassword.match(/^[\sa-z]+$/)) { bonus.FlatLower = -15; } if (strPassword.match(/^[\s0-9]+$/)) { bonus.FlatNumber = -35; } } function calcComplexity() { score = baseScore + (num.Excess*bonus.Excess) + (num.Upper*bonus.Upper) + (num.Numbers*bonus.Numbers) + (num.Symbols*bonus.Symbols) + bonus.Combo + bonus.FlatLower + bonus.FlatNumber; } function outputResult() { if ($("#inputPassword").val()== "") { complexity.html("Digite a Senha").removeClass("weak strong stronger strongest").addClass("default"); } else if (charPassword.length < minPasswordLength) { complexity.html("No mínimo " + minPasswordLength+ " caracteres por favor!").removeClass("strong stronger strongest").addClass("weak"); } else if (score<50) { complexity.html("Fraca!").removeClass("strong stronger strongest").addClass("weak"); } else if (score>=50 && score<75) { complexity.html("Média!").removeClass("stronger strongest").addClass("strong"); } else if (score>=75 && score<100) { complexity.html("Forte!").removeClass("strongest").addClass("stronger"); } else if (score>=100) { complexity.html("Segura!").addClass("strongest"); } $("#details").html("Base Score :<span class=\"value\">" + baseScore + "</span>" + "<br />Length Bonus :<span class=\"value\">" + (num.Excess*bonus.Excess) + " ["+num.Excess+"x"+bonus.Excess+"]</span> " + "<br />Upper case bonus :<span class=\"value\">" + (num.Upper*bonus.Upper) + " ["+num.Upper+"x"+bonus.Upper+"]</span> " + "<br />Number Bonus :<span class=\"value\"> " + (num.Numbers*bonus.Numbers) + " ["+num.Numbers+"x"+bonus.Numbers+"]</span>" + "<br />Symbol Bonus :<span class=\"value\"> " + (num.Symbols*bonus.Symbols) + " ["+num.Symbols+"x"+bonus.Symbols+"]</span>" + "<br />Combination Bonus :<span class=\"value\"> " + bonus.Combo + "</span>" + "<br />Lower case only penalty :<span class=\"value\"> " + bonus.FlatLower + "</span>" + "<br />Numbers only penalty :<span class=\"value\"> " + bonus.FlatNumber + "</span>" + "<br />Total Score:<span class=\"value\"> " + score + "</span>" ); } } ); Observe a função **outputResult** onde faz a validação com base no score 1. Tamanho mínimo 2. Caracteres maiúsculo 3. Números 4. Símbolos Um site que faz a medição como exemplo [http://www.passwordmeter.com/][1] [1]: http://www.passwordmeter.com/