passwdqc user community resources

passwdqc is a password/passphrase strength checking and policy enforcement toolset, including an optional PAM module (pam_passwdqc), command-line programs (pwqcheck and pwqgen), and a library (libpasswdqc).

• Password strength policy considerations (a must read before you possibly override passwdqc's defaults)
• How to install passwdqc on Solaris
• Testing of passwdqc on the leaked RockYou password list
• passwdqc tested on KoreLogic's DEFCON 2010 contest passwords
• A forum posting that shows how to enable and configure passwdqc on FreeBSD 5+ (also talks about pam_cracklib on CentOS, but fails to mention its drawbacks)
• How to enable and configure pam_passwdqc on a RHEL/Fedora/CentOS system from the NSA's “Guide to the Secure Configuration of Red Hat Enterprise Linux 5” (that's section 2.3.3.1.2 on page 38 in Revision 3 of the Guide)
• How to obtain, install, and configure pam_passwdqc on HP-UX 11 (PDF, go to page 16 for “How to configure PAM passwdqc password strength checking”)
• The OpenBSD Journal (undeadly.org) story on passwdqc, including brief instructions and OpenBSD-specific info
• Testing of password policy (ZeroNights 2013 slides) by Anton Dedov (Parallels), comparing passwdqc 1.3.0 with default settings against 4 other password strength checking tools
• Comparing the tools against 3 formal policy descriptions, also by Anton Dedov

• Russian discussion threads around the passwdqc 1.2.0 release and password security in general on OpenNet and linux.org.ru with many answers by Solar Designer

These are third-party and unofficial:

• Go bindings (documentation) by Dmitry Chestnykh
• JavaScript port (demo) by Parallels (now Odin)
• Perl module in CPAN by Sherwin Daganato
• PHP_passwdqc_check by Eric Helvey, and GenPhrase by Timo H
• Python package (reimplementation with changes) by Alastair Houghton
• Ruby projects derived from passwdqc by different authors

Local copies of these resources

Additionally, passwdqc 1.3.0+ includes an official PHP wrapper script pwqcheck.php for the command-line pwqcheck program.

• http://sisyphus.ru/en/srpm/passwdqc
• http://git.altlinux.org/people/ldv/packages/?p=passwdqc.git

• http://packages.qa.debian.org/p/passwdqc.html
• http://bugs.debian.org/cgi-bin/pkgreport.cgi?src=passwdqc
• http://git.debian.org/?p=collab-maint/passwdqc.git

• https://apps.fedoraproject.org/packages/passwdqc
• http://koji.fedoraproject.org/koji/packageinfo?packageID=11071

• https://packages.gentoo.org/packages/sys-auth/passwdqc

• http://pkgsrc.se/security/pam-passwdqc

• http://www.mindrot.org/projects/passwdqc/
• http://www.openbsd.org/cgi-bin/cvsweb/ports/security/passwdqc/

• https://software.opensuse.org/search?q=passwdqc

• http://packages.ubuntu.com/source/passwdqc
• http://packages.ubuntu.com/search?keywords=passwdqc

• http://rpmfind.net/linux/rpm2html/search.php?query=passwdqc