PHPackages                             diegomagikal/laravel-password - PHPackages - PHPackages  [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register)

1. [Directory](/)
2. /
3. [Security](/categories/security)
4. /
5. diegomagikal/laravel-password

ActiveLibrary[Security](/categories/security)

diegomagikal/laravel-password
=============================

Protect your users from entering dumb and common passwords

2.0.0(7y ago)148MITPHPPHP ~5.6|~7.0

Since Jul 2Pushed 7y ago1 watchersCompare

[ Source](https://github.com/diegomagikal/laravel-password)[ Packagist](https://packagist.org/packages/diegomagikal/laravel-password)[ Docs](https://github.com/diegomagikal/laravel-password)[ RSS](/packages/diegomagikal-laravel-password/feed)WikiDiscussions master Synced 2mo ago

READMEChangelog (1)Dependencies (3)Versions (6)Used By (0)

laravel-password
================

[](#laravel-password)

[![Latest Stable Version](https://camo.githubusercontent.com/5b92532ec33a5eb7bd3d082cffc5dc92f22babf1016c84cd1b1dc9e466c175ff/68747470733a2f2f706f7365722e707567782e6f72672f646965676f6d6167696b616c2f6c61726176656c2d70617373776f72642f762f737461626c652e737667)](https://packagist.org/packages/diegomagikal/laravel-password)[![License](https://camo.githubusercontent.com/809191a05450683d4a8d7dd4b9bd35c3ce65ea240155b77f8af5db41a41df3ba/68747470733a2f2f706f7365722e707567782e6f72672f646965676f6d6167696b616c2f6c61726176656c2d70617373776f72642f6c6963656e73652e737667)](LICENSE.md)[![Quality Score](https://camo.githubusercontent.com/70a2ba0f4abc7315062529a397154033914b109631f997615c67ad47bbb460a2/68747470733a2f2f696d672e736869656c64732e696f2f7363727574696e697a65722f672f646965676f6d6167696b616c2f6c61726176656c2d70617373776f72642e7376673f7374796c653d666c61742d737175617265)](https://scrutinizer-ci.com/g/diegomagikal/laravel-password)[![Total Downloads](https://camo.githubusercontent.com/a9a37a34cc3bf63704c1bd966148cae2007e60fd6d1427f73066edaeabe54e75/68747470733a2f2f696d672e736869656c64732e696f2f7061636b61676973742f64742f646965676f6d6167696b616c2f6c61726176656c2d70617373776f72642e7376673f7374796c653d666c61742d737175617265)](https://packagist.org/packages/diegomagikal/laravel-password)

> #### Guard your users from security problems by preventing them from having dumb passwords
>
> [](#guard-your-users-from-security-problems-by-preventing-them-from-having-dumb-passwords)

### Introduction

[](#introduction)

This package can be used to verify **the user provided password is not one of the top 10,000 worst passwords** as analyzed by a respectable IT security analyst. Read about all [ here](https://xato.net/10-000-top-passwords-6d6380716fe0#.473dkcjfm), [here(wired)](http://www.wired.com/2013/12/web-semantics-the-ten-thousand-worst-passwords/) or [here(telegram)](http://www.telegraph.co.uk/technology/internet-security/10303159/Most-common-and-hackable-passwords-on-the-internet.html)

Installation
------------

[](#installation)

[PHP](https://php.net) 5.5+ or [HHVM](http://hhvm.com) 3.3+, and [Composer](https://getcomposer.org) are required.

To get the latest version of Laravel Password, simply add the following line to the require block of your `composer.json` file.

```
"diegomagikal/laravel-password": "*"

```

You'll then need to run `composer install` or `composer update` to download it and have the autoloader updated.

- If you're on Laravel 5.5 or above, that's all you need to do! Check out the usage examples below.
- If you're on Laravel &lt; 5.5, you'll need to register the service provider. Open up `config/app.php` and add the following to the `providers` array:

```
DiegoMagikal\CheckPassword\CheckPasswordServiceProvider::class
```

Usage
-----

[](#usage)

Use the rule `checkpassword` in your validation like so:

```
/**
 * Get a validator for an incoming registration request.
 *
 * @param  array  $data
 * @return \Illuminate\Contracts\Validation\Validator
 */
protected function validator(array $data)
{
    return Validator::make($data, [
        'name' => 'required|max:255',
        'email' => 'required|email|max:255|unique:users',
        'password' => 'required|min:6|checkpassword|confirmed',
    ]);
}
```

Error shows on the page like so:

[![screen shot 2016-07-02 at 2 12 14 pm](https://cloud.githubusercontent.com/assets/2946769/16540503/103e0390-405f-11e6-9c4c-5d02dc1ce7ec.png)](https://cloud.githubusercontent.com/assets/2946769/16540503/103e0390-405f-11e6-9c4c-5d02dc1ce7ec.png)

[![screen shot 2016-07-02 at 1 22 45 pm](https://cloud.githubusercontent.com/assets/2946769/16540468/c6bd71f2-405d-11e6-8f34-d3a9b1b27e77.png)](https://cloud.githubusercontent.com/assets/2946769/16540468/c6bd71f2-405d-11e6-8f34-d3a9b1b27e77.png)

By default, the error message returned is `This password is just too common. Please try another!`.

You can customize the error message by opening `resources/lang/en/validation.php` and adding to the array like so:

```
  'checkpassword' => 'You are using a dumb password abeg',
```

Change log
----------

[](#change-log)

Please see [CHANGELOG](CHANGELOG.md) for more information on what has changed recently.

Contributing
------------

[](#contributing)

Please feel free to fork this package and contribute by submitting a pull request to enhance the functionalities.

Inspiration
-----------

[](#inspiration)

- [Prosper Otemuyiwa](https://github.com/unicodeveloper/laravel-password)

How can I thank you?
--------------------

[](#how-can-i-thank-you)

Why not star the github repo? I'd love the attention!

License
-------

[](#license)

The MIT License (MIT). Please see [License File](LICENSE.md) for more information.

###  Health Score

28

—

LowBetter than 54% of packages

Maintenance20

Infrequent updates — may be unmaintained

Popularity9

Limited adoption so far

Community13

Small or concentrated contributor base

Maturity62

Established project with proven stability

 Bus Factor2

2 contributors hold 50%+ of commits

How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window.

**Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores.

**Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement.

**Maturity (30%)** — Project age, version count, PHP version support, and release stability.

###  Release Activity

Cadence

Every ~206 days

Total

5

Last Release

2774d ago

Major Versions

1.0.3 → 2.0.02018-10-07

### Community

Maintainers

![](https://avatars.githubusercontent.com/u/16082344?v=4)[Diego ](/maintainers/DiegoMagikal)[@diegomagikal](https://github.com/diegomagikal)

---

Top Contributors

[![unicodeveloper](https://avatars.githubusercontent.com/u/2946769?v=4)](https://github.com/unicodeveloper "unicodeveloper (10 commits)")[![jkudish](https://avatars.githubusercontent.com/u/260253?v=4)](https://github.com/jkudish "jkudish (9 commits)")[![shalvah](https://avatars.githubusercontent.com/u/14361073?v=4)](https://github.com/shalvah "shalvah (2 commits)")[![Shaun2D2](https://avatars.githubusercontent.com/u/3941040?v=4)](https://github.com/Shaun2D2 "Shaun2D2 (2 commits)")[![juukie](https://avatars.githubusercontent.com/u/2678657?v=4)](https://github.com/juukie "juukie (1 commits)")[![diegomagikal](https://avatars.githubusercontent.com/u/16082344?v=4)](https://github.com/diegomagikal "diegomagikal (1 commits)")[![Chinoms](https://avatars.githubusercontent.com/u/18566684?v=4)](https://github.com/Chinoms "Chinoms (1 commits)")

---

Tags

securitypasswordeasypasswordsdumbfacilestupidinsecureDiegoMagikalsenhapalavra-passefoolinsegura

###  Code Quality

TestsPHPUnit

Code StylePHP\_CodeSniffer

### Embed Badge

![Health badge](/badges/diegomagikal-laravel-password/health.svg)

```
[![Health](https://phpackages.com/badges/diegomagikal-laravel-password/health.svg)](https://phpackages.com/packages/diegomagikal-laravel-password)
```

###  Alternatives

[unicodeveloper/laravel-password

Protect your users from entering dumb and common passwords

4261.4M2](/packages/unicodeveloper-laravel-password)[jeremykendall/password-validator

Password Validator validates password\_hash generated passwords, rehashes passwords as necessary, and will upgrade legacy passwords.

14469.9k3](/packages/jeremykendall-password-validator)[rych/phpass

PHP Password Library: Easy, secure password management for PHP

248801.7k4](/packages/rych-phpass)[mxrxdxn/pwned-passwords

A library to query Troy Hunt's Pwned Passwords service to see whether or not a password has been included in a public breach.

3270.9k2](/packages/mxrxdxn-pwned-passwords)[bordoni/phpass

Portable PHP password hashing framework

244.4M26](/packages/bordoni-phpass)[spooner-web/be_secure_pw

You can set password conventions to force secure passwords for BE users.

10461.3k](/packages/spooner-web-be-secure-pw)

PHPackages © 2026

[Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)
