# Password Strength

Scored the way an attacker attacks — zxcvbn's pattern matching against common passwords, names, and keyboard walks, with a crack-time estimate.

- Method: `GET`
- Path: `/v1/security/password-strength`

**Parameters**

| Name | Type | | Description |
|---|---|---|---|
| `password` | string | required | The password to score. Never logged, never stored. |

**Example request**

```bash
curl https://api.diraz.ae/v1/security/password-strength \
  -H "Authorization: Bearer drz_live_…"
```

**Example response**

```json
{
  "data": {
    "score": 4,
    "verdict": "very strong",
    "guesses": 10000000000000,
    "crack_time": "centuries",
    "crack_time_read": "centuries",
    "feedback": { "warning": null, "suggestions": [] }
  },
  "meta": {
    "request_id": "req_7Q2fK4mZ"
  }
}
```