About passwdqc
passwdqc is a password and passphrase strength checking and policy enforcement toolset for servers. It includes a PAM module, command-line programs, and a library for integration into other software.
passwdqc is a specialized toolset from Openwall for enforcing password and passphrase security policies on servers. It is not a consumer password manager, but rather a system-level utility for administrators of Unix-like systems such as Linux, FreeBSD, and Solaris. The suite includes a PAM module (pam_passwdqc) for system-wide policy enforcement, command-line tools for scripting and checks, and a C library for custom software integration. Its core function is to check the strength of new passwords against configurable rules. The software is open-source and free, with optional paid add-ons for filtering against large lists of known common or breached passwords. As it is a command-line toolset, there is no graphical user interface, and deployment is on-premise. Support is available through a public mailing list.
Pros & Cons
- Provides robust, configurable password and passphrase strength checking for servers.
- Integrates with standard Unix/Linux authentication via a PAM module.
- Core toolset is free and open-source.
- Includes command-line utilities and a library for flexible integration.
- Supports checking against lists of common passwords, as recommended by NIST.
- This is a command-line tool for system administrators; it has no graphical user interface.
- Filtering against large, up-to-date lists of breached passwords requires a paid subscription.
- The name 'passwdqc' can be confused with the standard 'passwd' command by inexperienced users.
Features
Key features
Assesses the strength of passwords and passphrases against configurable policies.
Enforces password policies during password changes, configurable through the PAM module.
Can be configured to offer randomly-generated, secure passphrases to users.
Includes tools like pwqcheck, pwqfilter, and pwqgen for scripting and manual checks.
Provides libpasswdqc for developers to integrate password checking into third-party applications.
Additional features
Integrates with the Pluggable Authentication Modules (PAM) framework on Unix-like systems.
Natively handles and checks the strength of multi-word passphrases, not just single passwords.
Supports filtering against lists of common or breached passwords (available as a paid add-on).
Designed to work on various Unix-like operating systems including Linux, FreeBSD, Solaris, and HP-UX.
The core toolset is free and open-source software.
Pricing
Annual plans
- Large regularly updated binary filters
- Prevents reuse of 847+ million leaked passwords
- Based on full HIBP v8+
- Cancel any time
One-time purchase
- Small static binary filters
- Prevents reuse of 2+ or 14+ million common passwords
- Based on HIBP v7 and RockYou lists
Countries & Languages
Interface languages
Billing currencies
No reviews yet
Be the first to drop a review
Alternatives to passwdqc
Recoveryfix PST Password Recovery
Recoveryfix PST Password Recovery is an exceptionally reliable, lightweight tool built to handle a specific…
Nucleon Malprob
Nucleon Malprob is a malware protection software from Nucleon Security that focuses on detecting and…
Nucleon CyclonShield MDR
Nucleon CyclonShield MDR is a cybersecurity software platform from Nucleon Security that provides managed detection…
Entersekt Authentication Platform
Entersekt Authentication Platform is an authentication software from Entersekt that provides a unified solution for…
Spot something wrong or outdated?
Suggest a correction — a reviewer verifies every change.
About passwdqc
passwdqc is a password and passphrase strength checking and policy enforcement toolset for servers. It includes a PAM module, command-line programs, and a library for integration into other software.
passwdqc Details
passwdqc's In-App Market Place
Does passwdqc have an in-app market place?
Yes
How many Mini-Apps in the marketplace?
0
Mini Apps
Pricing Options
Plans
Annual plans
- Large regularly updated binary filters
- Prevents reuse of 847+ million leaked passwords
- Based on full HIBP v8+
- Cancel any time
One-time purchase
- Small static binary filters
- Prevents reuse of 2+ or 14+ million common passwords
- Based on HIBP v7 and RockYou lists
Accepted Payment Currencies
USD
Pros & Cons
- Provides robust, configurable password and passphrase strength checking for servers.
- Integrates with standard Unix/Linux authentication via a PAM module.
- Core toolset is free and open-source.
- Includes command-line utilities and a library for flexible integration.
- Supports checking against lists of common passwords, as recommended by NIST.
- This is a command-line tool for system administrators; it has no graphical user interface.
- Filtering against large, up-to-date lists of breached passwords requires a paid subscription.
- The name 'passwdqc' can be confused with the standard 'passwd' command by inexperienced users.
passwdqc's Support Options
Email Address
support@openwall.compasswdqc's Alternatives
Recoveryfix PST Password Recovery
Recoveryfix PST Password Recovery is an exceptionally reliable, lightweight tool built to handle a specific…
Nucleon Malprob
Nucleon Malprob is a malware protection software from Nucleon Security that focuses on detecting and…
Nucleon CyclonShield MDR
Nucleon CyclonShield MDR is a cybersecurity software platform from Nucleon Security that provides managed detection…
Entersekt Authentication Platform
Entersekt Authentication Platform is an authentication software from Entersekt that provides a unified solution for…
