its just a javascript that does mathematic permutations on your password and calculates "average time" to brute force it. Its not like its going to hack you without your username, at least. Its not like its going to be meaningful anyways. It does not takes into account server delay between wrong passwords, dictionary attacks.... its shitty at determining password safety, at least. More on reddit.com

As I prepare for this lesson and used the How Secure is My Password site, the instructions say to make sure we look at “show details” as test passwords. I do not see that link on the site. Is that an old instruction or am I missing something? thanks, Jim More on forum.code.org

Nah, they said outright they're getting compensation for the products they linked. One glaring omission is how with so many VPN vendors reviewed, they didn't test Mullvad, which is not an obscure provider, likely because Mullvad have no referral scheme. I checked their review on Windscribe and their protocol description is clearly written by a non-techie who just grab whatever they can from Wikipedia. Another red flag is when talking about VPN, they only brush about advertisers tracking traffic without explicitly pointing out a VPN won't help without adblocker and first party tracking is inevitable. Privacyguides.org is much more succinct, and they clearly states when a VPN is useless, what other measure needed for privacy etc. I won't say Nord is a scam, personally I found them overpriced, but that's because I don't need most of their features, others may find them more practical. What I really dislike about Nord and other providers with aggressive referral scheme is pretty much any articles and comments talking about them is sus, because everyone and their dog have an incentive to praise them even if they don't know anything about tech. Tom Scott have a video about VPN which you should watch if you're still green about this, IVPN also have doineedavpn.com to help you figure out if you might need one. More on reddit.com

Um, no. It's an absolutely horrible way to check your password strength. A site you have no reason to trust and which you have to allow to run its scripts in your browser now has your passwords. If you've ever used them anywhere, it would be trivial for them to connect them to you. Just do a short, 3-4 word phrase and mix in some capital letters and numbers. "shouldnottrust" to "sh0u1dNOTtrust", for example, is just as good against random attacks (nothing will protect you from a keylogger, clipboard monitor (if you use a password manager) or the target site being compromised) as a random string of gibberish would be and is a helluva lot easier to remember. More on reddit.com