Password strength checking library

Question

Can anyone recommend a Java library that contains methods that are suitable for performing server-side password strength checking in a webapp. Ideally the checker should be:

• configurable, allowing the deployer to supply different dictionaries, adjust weights of different criteria, and so on
• extensible allowing new criteria to be implemented if required
• implemented in pure Java
• not fundamentally intertwined with a tag libraries, UI components or "password management" functionality
• compatible with a GPL 3 project
• compatible with Spring wiring
• mavenized (ideally available through Maven Central)

Answer 1

you might find this post usefule - http://stackoverflow.com/questions/75057/what-is-the-best-way-to-check-the-strength-of-a-password

Answer 2

Have a look at vt-password:

• configurable, allowing the deployer to supply different dictionaries, adjust weights of different criteria, and so on - Partially (yes to configurable, dictionaries, no to weighted criteria)
• extensible allowing new criteria to be implemented if required - Yes
• implemented in pure Java - Yes (and decent javadoc)
• not fundamentally intertwined with a tag libraries, UI components or "password management" functionality - Yes
• compatible with a GPL 3 project - is GPL
• compatible with Spring wiring - Looks like
• mavenized (ideally available through Maven Central) - Yes (but not in central)