Another option is to test password complexity in javascript on client (ála Google and others), which provides immediate feedback to the user. This is prone to a

Another option is to test password complexity in javascript on client (ála Google and others), which provides immediate feedback to the user. This is prone to a dictionary attack only if the user uses well known character replacements like 'p@$sw0rd', which pass these tests undetected. https://github.com/search?q=password+strength https://github.com/search?q=password+strength https://sun.athnic.net/password-test.html https://sun.athnic.net/password-test.html http://www.geekwisdom.com/dyn/passwdmeter http://www.geekwisdom.com/dyn/passwdmeter http://cafewebmaster.com/check-password-safety-javascript-while-typing http://cafewebmaster.com/check-password-safety-javascript-wh...