- a "poor/medium/strong" indicator for the strength of passwords as users create or update them. - poor indicates no usage of special characters/uppercase/digits - medium indicates usage of any one out of special characters/uppercase/digits - strong indicates usage of all three