Password Policy Analyzer

Lab: Build a Password Policy Analyzer (Python + Kali Linux)

This tool will:

• Evaluate password strength
• Compare an organization’s password policy against standards
• Generate findings + remediation guidance
• Produce a security report

---

Step 1 — Create Project Folder

Open Terminal

Run:

mkdir password-policy-analyzer

cd password-policy-analyzer

To verify, run:

pwd

SUMMARY:

Open Terminal, Folder created, Current directory shown

---

Step 2 — Create Python Virtual Environment

Install venv:

sudo apt update

sudo apt install python3-venv -y

Create environment:

python3 -m venv venv

Activate:

source venv/bin/activate

---

Step 3 — Install Dependencies

Install packages:

pip install pandas tabulate zxcvbn

Verify, run:

pip list

The List of Expected packages: pandas tabulate zxcvbn

---

Step 4 — Create Project Files

Run:

touch analyzer.py

touch password_policy.json

touch report.txt

Open VS Code:

code .

SUMMARY:

The Folder should look like:

password-policy-analyzer │ ├── analyzer.py ├── password_policy.json ├── report.txt └── venv

---

Step 5 — Create Example Password Policy

Open:

password_policy.json

Type:

{ "minimum_length": 8, "require_uppercase": true, "require_numbers": true, "require_symbols": true, "expiration_days": 90, "allow_common_passwords": false }

Save

---

Step 6 — Create the Analyzer

Open: analyzer.py Type:

import json
from zxcvbn import zxcvbn
from tabulate import tabulate


with open("password_policy.json") as f:
   policy = json.load(f)


audit=[]


if policy["minimum_length"] < 12:
   audit.append(
       ["Minimum Length",
        "FAIL",
        "Use 12+ characters"]
   )
else:
   audit.append(
       ["Minimum Length",
        "PASS",
        "Good"]
   )


if policy["expiration_days"] <= 90:
   audit.append(
       [
           "Rotation",
           "WARN",
           "Avoid forced resets"
       ]
   )


sample="Summer2026!"


score=zxcvbn(sample)


audit.append([
   "Password Strength",
   score["score"],
   score["feedback"]["warning"]
])


print(tabulate(
   audit,
   headers=[
       "Category",
       "Status",
       "Recommendation"
   ]
))