Logical
Practice text-complexity checks with dummy password-like strings
Combine length, case and digit checks in a spreadsheet using synthetic examples; this is not a password-strength test.
Test five complexity requirements inside AND
Standard comparisons like A2 = LOWER(A2) are case-insensitive in spreadsheets ("Vault" = "vault" returns TRUE!). Only EXACT compares character case strictly: NOT(EXACT(A2, LOWER(A2))) proves at least one uppercase letter exists, and NOT(EXACT(A2, UPPER(A2))) proves at least one lowercase letter exists.
Splitting on digits {"0".."9"} with COLUMNS(TEXTSPLIT(A2, {"0","1","2","3","4","5","6","7","8","9"})) > 1 confirms at least one numeric digit is present, while ISERROR(FIND(" ", A2)) rejects spaces.
| Candidate | Len >= 8 | Upper + Lower | Has Digit | No Space | Overall |
|---|---|---|---|---|---|
| Vault9Key | TRUE (9) | TRUE | TRUE | TRUE | TRUE |
| vault9key | TRUE (9) | FALSE (no upper) | TRUE | TRUE | FALSE |
| VaultKeys | TRUE (9) | TRUE | FALSE | TRUE | FALSE |
| Vault 9Key | TRUE (10) | TRUE | TRUE | FALSE | FALSE |
All-in-one password complexity formula
Use only invented example strings to practice the boolean expression. Never put real passwords into a workbook, shared document, or AI request.
=AND(LEN(A2)>=8, NOT(EXACT(A2, LOWER(A2))), NOT(EXACT(A2, UPPER(A2))), COLUMNS(TEXTSPLIT(A2, {"0","1","2","3","4","5","6","7","8","9"}))>1, ISERROR(FIND(" ", A2)))Human-readable Pass / Fail audit label
The label reports whether the string satisfies this particular exercise, not whether it is a secure password.
=IF(AND(LEN(A2)>=8, NOT(EXACT(A2, LOWER(A2))), NOT(EXACT(A2, UPPER(A2))), COLUMNS(TEXTSPLIT(A2, {"0","1","2","3","4","5","6","7","8","9"}))>1, ISERROR(FIND(" ", A2))), "Passes example rules", "Fails example rules")Inputs and interpretation
Composition rules do not establish password strength. Current NIST guidance rejects mandatory mixtures of character types for password verifiers; real authentication needs dedicated controls beyond a spreadsheet formula. This exercise checks ASCII digits and the ordinary space character only, not all Unicode whitespace. It neither checks breached-password lists nor provides secure password storage.
Try the example
Use the original values or change them to test your understanding.