Every saved password is scored entirely on your own device — nothing about it is sent anywhere, ever — using an entropy estimate plus a few checks for obvious weaknesses a raw character count alone would miss (common leaked passwords, keyboard-pattern runs like qwerty, and long repeated-character runs).

Weak, Moderate, Strong

Any one concrete weakness marks a password Weak outright, regardless of its length. Otherwise the label is purely the entropy estimate, split at the same bit threshold Vodou's own generator (below) treats as "strong."

Reused passwords

If the exact same password is saved for more than one login, every one of those entries shows Reused (N×) in red — even if the password itself is otherwise strong. Reuse is a real risk on its own: one breached site exposes every other login sharing that password. Hover the badge to see which other saved logins share it, so you can verify the flag rather than take it on faith.

Reuse is different from a duplicate — two logins that merely share a password are still two real, separate accounts. See Finding and removing duplicate logins for the stricter, "saved twice by mistake" case.

Generating a strong password

When adding or editing a login, click Generate Strong Password… to open the generator: a length slider and three independently-toggleable character types (letters, numbers, punctuation — at least one has to stay on), with a live strength readout as you adjust them. Generating never overwrites anything by itself — the result only fills the password field below, and you still have to press Save to actually replace the stored password.