Password API

Generate cryptographically secure passwords, batch-generate, score strength, and produce xkcd-style passphrases. Free. No signup. All work happens server-side using Python's secrets module.

Try the interactive tool →

Endpoints

GET /password

Generate one password. Query params: length (1-256, default 16), lowercase, uppercase, numbers, symbols (booleans), exclude_ambiguous (skip 0/O/1/l/I and similar), require_each_class (guarantee one char per enabled class).

curl "https://forge-node.tail2b516d.ts.net/password?length=20&exclude_ambiguous=true"
POST /password/multiple

Generate up to 100 passwords in one call.

curl -X POST https://forge-node.tail2b516d.ts.net/password/multiple \
  -H "Content-Type: application/json" \
  -d '{"count": 10, "length": 16, "symbols": true}'
POST /password/strength

Score a password: entropy bits, character classes, common-password and keyboard-pattern checks, online vs offline crack time estimates.

curl -X POST https://forge-node.tail2b516d.ts.net/password/strength \
  -H "Content-Type: application/json" \
  -d '{"password": "correct horse battery staple"}'
GET /password/passphrase

Generate an xkcd-style passphrase. Query params: words (2-20, default 6), separator (default -), capitalize, add_number.

curl "https://forge-node.tail2b516d.ts.net/password/passphrase?words=6&capitalize=true"

Wordlist: 719 curated common English words. 6-word passphrase ≈ 56.9 bits of entropy.

Rate limit

120 requests per minute per IP. All randomness is from secrets (CSPRNG). No passwords are logged, stored, or transmitted to third parties.

Strength scoring

Score is 0-4 (very weak, weak, fair, strong, very strong) based on entropy, with penalties for common passwords and keyboard patterns. Crack time uses standard estimates: 1,000 guesses/sec online (throttled), 1011 guesses/sec offline (modern GPU on a fast hash).

← Forge Gateway home