Password strength API

Evaluates length, character classes, sequences and common passwords into a 0–4 score with improvement hints. POST-only so secrets never hit URLs or access logs.

Endpoint

MethodPath
POST/api/v1/password/score

Example

curl -X POST "https://formfit.dev/api/v1/password/score" \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"password":"Tr0ub4dour&3"}'

Response (excerpt)

{"score":3,"label":"strong","suggestions":[]}

FAQ

Why is there no GET endpoint?
To keep passwords out of URLs and access logs. Always send via POST body.

More formfit APIs