Skip to content
JS
Package

zxcvbn

realistic password strength estimation

v4.4.2, 7 Feb 2017MITCommonJSTypes: NoneAuthentication and authorisationSecurity
$ npm install zxcvbn

Key numbers

As of 25 Sept 2026
Weekly downloads
1.1m
+61% over 12 months
Gzip bundle size
-
No Bundlephobia data
Dependencies
0
Direct, from package.json
Last release
9 years ago
v4.4.2
GitHub stars
16.1k
1k forks
Open issues / PRs
120 / 26
Contributors
-
Commits, last 52 weeks
0

Downloads

Last week 2026-09-15 to 2026-09-21
0500k1m1.5m2mSept 2025Mar 2026Sept 2026High 1.8m (5 May 2026)Low 473.8k (23 Dec 2025)
Weekly npm downloads, one point per week, weeks starting 23 Sept 2025 to 15 Sept 2026. The y axis starts at zero.

1,086,644 downloads last week, 5,501,287 in the last month. The 12-month change of +61% compares the average of the last 4 weeks with the first 4 weeks of the series.

Releases, last 12 months
023 in total
Latest version
4.4.2, 7 Feb 20179 years ago
First published
1 Dec 2012
Last push to GitHub
19 Aug 2024766 days before the snapshot
Repository archived
No
Open issues
120
Open pull requests
26
Commits, last 52 weeks
0
Dependents on npm
498

Major versions

  1. v4 first release 4.0.1, 24 Oct 2015
  2. v3 first release 3.0.0, 8 Aug 2015
  3. v2 first release 2.0.1, 23 Jul 2015
  4. v1 first release 1.0.0, 1 Dec 2012

Recent releases

VersionPublished
4.4.27 Feb 2017
4.4.131 Oct 2016
4.4.024 Sept 2016
4.3.04 May 2016
4.2.020 Nov 2015
4.1.130 Oct 2015
4.1.029 Oct 2015
4.0.124 Oct 2015
3.5.024 Sept 2015
3.4.09 Sept 2015
3.3.16 Sept 2015
3.3.05 Sept 2015
3.2.223 Aug 2015
3.2.123 Aug 2015
Module format
CommonJSFrom package.json type, main and exports fields
TypeScript types
None
Node.js engine range
Not declared
Runtimes
-
Unpacked size (npm)
-
Dependencies (0)
None
npm install zxcvbn

CDN

jsDelivr: 940.3k requests in 30 days
  • jsDelivrhttps://cdn.jsdelivr.net/npm/zxcvbn@4.4.2/
  • unpkghttps://unpkg.com/zxcvbn@4.4.2/
  • esm.shhttps://esm.sh/zxcvbn@4.4.2
PackageWeekly downloadsGzipLast releaseModuleComparison
@zxcvbn-ts/core984.6k-1 month agoESM + CommonJSzxcvbn vs @zxcvbn-ts/core
sasl-plain19.7k-13 years agoCommonJS-
sasl-scram-sha-115.2k-6 months agoCommonJS-
sasl-anonymous15.1k-13 years agoCommonJS-
secure-web-token81.3k-3 months agoESM + CommonJS-
@aparajita/capacitor-biometric-auth161.2k-7 months agoESM + CommonJS-

Related

Sources: npm registry, npm downloads API, GitHub API, jsDelivr. Data fetched 25 Sept 2026.

Indexability: Indexed.