I had a surprise today when I tried to change the root password on a new account. I typed in the password that I use for my KnownHost accounts, and the strength meter said "Very Weak (0/100)". It was a reasonable password, so I wondered what was causing it to register as very weak. What I discovered was that the password strength changed in what I consider unexpected ways as I typed the password. It looks to me like the algorithm is a little too sensitive to repeating characters. Take a look at the results of the strength meter for various lengths of the same password. Am I missing something here? These results don't make much sense to me: 01 w 08 wh 11 whe 14 wher 17 where 20 wheres 21 wherese 24 wheresev 23 whereseve 20 wheresever 15 wheresevere 38 wheresevere3 50 wheresevere34 48 wheresevere34h 40 wheresevere34he 30 wheresevere34her 18 wheresevere34here 22 wheresevere34heret 16 wheresevere34hereto 30 wheresevere34heretom 16 wheresevere34heretomo 00 wheresevere34heretomor 00 wheresevere34heretomorr 00 wheresevere34heretomorro 00 wheresevere34heretomorrow This wasn't a problem. I just changed the password strength settings to zero and changed the password. But it confused me. Also, this is not the actual password, but it represents the same format with words that have a slightly higher degree of similarity.