Security Audit Score Calculation

Estimated reading: 3 minutes 179 views Contributors

Summary: The security audit score in Keeper is represents the percentage of record passwords, across all record passwords for all users, that are strong, medium, or weak.

How are Security Scores Calculated?

Record Password Strength

The Record Password Strength score represents the percentage of record passwords, across all record passwords for all users, that are strong, medium, or weak. This score is calculated by adding all user’s individual Record Password Strength, and then dividing it by the total number of records.

For each user, the Record Password Strength is calculated by the taking the number of strong, medium, or weak passwords and dividing it by the total number of records.

For example, if a user’s vault has 10 total records where:

6 of the records have a strong password
3 of the records have a medium password
1 of the record has a weak password

The Record Password Strength score for this user will be as follows:

Strong passwords: 6/10 = 0.6 = 60%
Medium passwords: 3/10 = 0.3 = 30%
Weak passwords: 1/10 = 0.1 = 10%

Unique Record Passwords

The Unique Record Passwords score represents the percentage of record passwords, across all record passwords for all users, that are Unique or Reused. This score is calculated by adding all user’s individual unique password score, and then dividing it by the total number of records.

For each user, the Unique Passwords Record Score is calculated by taking the number of unique passwords in the user’s vault and dividing it by the total number of records.

For example, if a user’s vault has 10 total records where:

6 of the records have a unique password
2 of the records share the same password
2 of the records share the same password

There are 6 unique passwords, 1 unique password that is shared between 2 records, and another unique password that is shared between 2 records. Thus, there are a total of 8 unique passwords. The Unique Passwords Record Score for this user will be as follows:

Unique passwords: 8/10 = 0.8 = 80%
Reused passwords: 2/10 = 0.2 = 20%

Two-Factor Authentication

The Two-Factor Authentication score represents the percentage of users that have enabled Two-Factor Authentication. This score is calculated by adding all the Two-Factor Authentication scores of all users and then dividing it by the number of total users.

For each user, the Two-Factor Authentication score will be one of the following values depending on whether the user has Two-Factor Authentication On or Off:

0% if Two-Factor Authentication is Off
100% if Two-Factor Authentication is On

Master Password Strength

The Master Password Strength is not displayed on neither the Vault Clients nor Admin Console. Instead, the Master Password Strength is displayed upon Account Creation.