Is there a PHP version of zxcvbn.js or a way that I can use it server side to enforce a password rule?

Question

I'm using zxcvbn, a password strength checker, to display the strength of a password.

I would like to enforce a certain level of strength using the provided algorithm, but obviously it can be tampered with on the client side so I also need to verify the password on the server side to make sure. As far as I can tell there is no PHP version of zxcvbn currently and I don't have time to port it right now.

What would my options be?

Answer 1

There is a PHP port of a Python port of zxcvbn available on github at https://github.com/Dreyer/php-zxcvbn. Note, the author states that at this time it is not recommended for production use.