Behaviour-based credentialrisk classification

Evaluate password structure, detect predictable behaviours, and check known breach exposure through a privacy-preserving range query.

BambiVault analyser showing a weak password, known breach exposure, and stronger personalised alternatives.
14M+
Training records
Live
HIBP range lookup
10
Structural signals
<1s
Per analysis

Password Security Intelligence

BambiVault combines machine learning, behavioural pattern detection, and breach intelligence to deliver a more complete assessment of password risk.

Machine-learning classification

An experimental Random Forest classifier evaluates ten structural and behavioural signals across five strength categories. Its result is presented with pattern and breach evidence.

Privacy-preserving breach intelligence

Known exposure is identified using k-anonymity, ensuring the complete password is never transmitted to the breach-checking provider.

Personalised security guidance

Every assessment translates detected weaknesses into focused recommendations and stronger alternatives relevant to the submitted password.

Assessment Process

Comprehensive security intelligence in three focused steps.

1

Submit a password for assessment

BambiVault calculates initial security indicators and evaluates its structural characteristics.

2

Detect weaknesses and known exposure

Behavioural patterns are evaluated locally, while breach detection uses only a five-character hash prefix.

3

Receive actionable security intelligence

Review the risk classification, detected weaknesses, breach exposure, and tailored improvement recommendations.

Research-Driven Security Analysis

BambiVault combines established security techniques with real-world password data to produce explainable, consistent, and relevant assessments.

Real-world training data

The classification model is trained using the RockYou dataset, a widely recognised corpus for password-security research.

Feature-based classification

The Random Forest classifier is an experimental component trained on derived structural labels. Its classification is not presented as a password-cracking estimate.

Privacy-preserving exposure checks

Breach intelligence uses a five-character hash prefix. The complete password is never submitted to the external provider.

Behavioural risk detection

BambiVault identifies keyboard walks, names with years, substitutions, and dictionary words that conventional strength meters may overlook.

Privacy by design

Designed for Privacy

Clear safeguards govern how passwords and account information are processed.

Passwords submitted for assessment are not retained in plaintext.
Breach checks transmit only a partial hash, never the complete password.
Guest assessments are not linked to an account or retained in account history.
Vault data is encrypted using the account holder's master password and Account Key.
Administrative reporting contains aggregated and anonymised statistics only.
Account deletion removes the associated profile and vault data.

Frequently asked questions

Can I safely assess an active password? +

BambiVault does not retain submitted passwords in plaintext, and breach checks use only a partial hash. For additional caution, use a representative password with a comparable structure.

Do I need an account? +

No. Password assessments are available immediately. An account provides access to analysis history, personalised insights, and encrypted vault capabilities.

How does my account password differ from my vault master password? +

Your account password authenticates access to BambiVault. Your vault master password and Account Key are separate security factors used to decrypt vault entries.

Who can access institutional analytics? +

Access is limited to authorised administrators. Reports contain aggregated statistics and do not expose individual passwords or identifiable submissions.

Strengthen your password security

Move beyond basic strength scores with machine-learning analysis, behavioural insights, and real-world breach intelligence.

Analyse a password