Password Generator & Analyzer
## Overview The Password Generator & Analyzer API provides 40 endpoints for creating strong passwords, analyzing strength, and generating secure credentials. ## Key Features - **Password Generation**: Random passwords with configurable character sets, length, and rules - **Passphrase Generation**: Diceware-style memorable passphrases with custom word lists - **Strength Analysis**: Entropy…
Password Generator & Analyzer endpoints
| Method | Endpoint | Description |
|---|---|---|
| GET |
Generate a cryptographically random password /generate/random |
Generate a random password using the OS CSPRNG (secrets module). At least one character from each enabled class is guaranteed. |
| GET |
Generate a memorable password (word + digits + symbol) /generate/memorable |
Combines a random English word with digits and a symbol for memorability. |
| GET |
Generate a random numeric PIN /generate/pin |
Generate a random PIN of 4–8 digits using a CSPRNG. |
| GET |
Generate password from a pattern string /generate/pattern |
Use a pattern string where each character specifies a character class: - `L` = any letter - `U` = uppercase letter - `l` = lowercase letter - `D` = digit - `S` = symbol - `W` =… |
| GET |
Generate a pronounceable password /generate/pronounceable |
Generate a password that follows consonant-vowel syllable patterns, making it easier to remember while still being random. |
| GET |
Generate multiple passwords at once /generate/batch |
Generate up to 50 passwords in a single request. Each has an individual entropy score. |
| GET |
Generate a UUID-based password /generate/uuid-password |
Derive a password from a UUID v4, formatted into segments for readability. |
| GET |
XKCD-style passphrase ('correct horse battery staple') /generate/xkcd |
Generate an XKCD-style passphrase (https://xkcd.com/936/). Uses common English words with configurable separator and capitalization. |
| GET |
Diceware passphrase using EFF wordlist /generate/diceware |
Generate a Diceware passphrase using the EFF short wordlist. Simulates physical dice rolls for auditable randomness. |
| GET |
BIP39-style mnemonic phrase /generate/bip39 |
Generate a BIP39-style mnemonic phrase from the BIP39 English wordlist. Useful for cryptocurrency wallets and high-entropy seed phrases. |
| POST |
Comprehensive password strength analysis /analyze/strength |
Perform a full strength analysis including entropy, crack times across 5 attack scenarios, character composition, pattern detection, and actionable improvement suggestions. Score… |
| POST |
Calculate password entropy with breakdown /analyze/entropy |
Calculate the effective and theoretical entropy of a password. Effective entropy uses actual character classes present; theoretical uses the full charset size. |
| POST |
Detailed crack time estimates across attack scenarios /analyze/crack-time |
Calculate how long a brute-force attack would take under 5 different hardware and scenario configurations, from throttled online attacks to GPU cluster offline attacks. |
| POST |
Detect all patterns in a password /analyze/patterns |
Detect keyboard walks, repeated characters, sequential characters, date patterns, dictionary words, and leet-speak substitutions. Returns all detected patterns with their types. |
| POST |
Character class breakdown /analyze/composition |
Detailed breakdown of character classes in the password: counts and percentages for uppercase, lowercase, digits, and symbols. |
| POST |
Check for dictionary words (forward, reverse, leet-decoded) /analyze/dictionary |
Check if the password contains English dictionary words in their original form, reversed, or decoded from leet-speak. A password containing dictionary words is significantly… |
| POST |
Compare two passwords /analyze/compare |
Compare two passwords side by side: which is stronger, their relative entropy difference, shared patterns, and similarity score. |
| POST |
Analyze and return specific improvement suggestions /analyze/suggestions |
Analyze a password and return actionable, specific suggestions for making it stronger. Each suggestion addresses a detected weakness. |
| POST |
Analyze multiple passwords and rank by strength /analyze/bulk |
Analyze up to 50 passwords in a single call. Results are sorted strongest first (highest score). Useful for comparing candidate passwords or auditing a list. |
| POST |
Define and validate against a custom policy /policy/custom |
Validate a password against a fully custom policy. Supported fields: min_length, max_length, require_upper, require_lower, require_digit, require_symbol, no_common,… |
| POST |
Analyze password history for reuse and similarity /analyze/history |
Analyze a list of passwords (your history) to detect reuse or near-reuse patterns. Uses Levenshtein distance to find similar passwords. NEVER logged — analysis is stateless and… |
| GET |
Generate a random passphrase /passphrase/generate |
Generate a passphrase from the EFF diceware wordlist with configurable word count, separator, capitalization, and optional number suffix. |
| GET |
Diceware passphrase with simulated dice rolls /passphrase/diceware |
Generate a Diceware passphrase using the EFF short wordlist. Each word is selected by simulating dice rolls, providing auditable and reproducible randomness. |
| POST |
Analyze passphrase strength /passphrase/analyze |
Analyze a passphrase's strength comparing its word-based entropy (if the wordlist is known) against its character-based entropy. Both metrics are returned with comparative notes. |
| POST |
Suggest passphrase improvements /passphrase/improve |
Analyze a passphrase and suggest specific improvements: adding words, changing separators, capitalizing, or appending numbers. |
| POST |
Detailed per-rule policy validation /policy/validate |
Full per-rule pass/fail breakdown against a named preset policy. |
| GET |
Wordlist statistics /passphrase/wordlist |
Return stats about the available wordlists used for passphrase generation. |
| POST |
Check against NIST SP 800-63B guidelines /policy/nist |
Validate a password against NIST Special Publication 800-63B guidelines: - Minimum 8 characters - No composition rules (no forced mixed case/symbols) - Check against… |
| POST |
Score a policy definition itself /policy/score |
Rate how strong a policy is — is the policy itself secure enough? Returns a score 0–100 rating the policy's requirements. |
| POST |
Check password against a preset policy /policy/check |
Quick pass/fail check against a named preset policy. Returns overall result only. |
| GET |
List all available preset policies /policy/presets |
Return all preset password policies with their configurations. Includes: basic, moderate, strong, paranoid, nist-800-63b, pci-dss. |
| POST |
Show which hashcat rules would crack this password /breach/hashcat-rules |
Simulate which hashcat transformation rules would apply to crack or mutate this password. Helps understand how rule-based attacks work and why dictionary-based passwords are weak… |
| GET |
Recommend a policy based on use case /policy/recommend |
Get a policy recommendation for a specific use case. Use cases: banking, email, admin, gaming, social_media, api_key, healthcare, etc. |
| POST |
Check multiple passwords against a policy /policy/bulk-check |
Check up to 50 passwords against a named preset policy. Returns pass/fail for each. |
| POST |
Check if password is in the common password list /breach/check-common |
Check if the password appears in our curated list of 500+ most common passwords. Returns the rank (lower = more common) if found, otherwise indicates the password is not in the… |
| POST |
Find similar passwords in the common list /breach/similarity |
Compute Levenshtein similarity between the input password and all passwords in the common list. Returns the top-10 closest matches. A highly similar match indicates the password… |
| POST |
Generate common attack variations of a password /breach/variations |
Generate the variations an attacker would try when they know your base word or pattern. Includes: leet-speak, capitalization, number/symbol suffixes, reversal, doubling, and year… |
| POST |
Detailed brute-force time calculator with hardware specs /breach/time-to-crack |
Calculate brute-force crack times across multiple attack hardware configurations. You can optionally provide custom speeds (guesses/sec) per scenario. All times assume… |
| GET |
API information / |
Return API metadata and endpoint overview. |
| GET |
Health check with wordlist stats /health |
Health check endpoint with wordlist and system stats. |
Password Generator & Analyzer pricing
| Plan | Price | Rate limit | Quotas |
|---|---|---|---|
| BASIC | Free | — |
|
| Pro | $9.99 / month | 20 / minute |
|
| Ultra | $29.99 / month | 100 / minute |
|