2. The password audit system of claim 1 , wherein the central processing unit is configured to generate a list comprising the user identifications and assigned values relating to the strength of the user passwords.
1. A password audit system for determining strength of user passwords in a computer system, application or network to which a plurality of users have access via a user identification and password, the password audit system comprising: an interface for establishing a data connection between the password audit system and the computer system, application or network, the interface being configured to retrieve cipher text user passwords stored on the computer system, application or network; a central processing unit, being configured to successively generate different plain text passwords by employing at least one of a method using one or more dictionaries and a method using random combinations of characters, encode the plain text passwords into corresponding cipher text passwords with an encryption algorithm, compare the encoded cipher text passwords to a given one of the retrieved cipher text passwords, until a match is found or a predetermined time has elapsed, and determine the strength of each of the user passwords based on the employed method used to generate the different plain text passwords and an amount of time needed to find the match; and data storage means for storing data relating to the strength of each of the user passwords without storing the passwords themselves, wherein the interface, the central processing unit, and the data storage means are enclosed in a housing which is separate from the computer system, application or network.