PWGEN API · V1

Passwords for
applications and scripts.

Three public JSON endpoints using cryptographically secure random generation. Up to 60 requests per minute and IP address.

Security model

API passwords are generated on the server and transmitted over HTTPS. They are not stored or cached and should never be sent as URL parameters. For sensitive personal passwords, the local web generator is the better choice.

Endpoints

POST

/api/pwgen/characters

Random character passwords, 1–128 characters.

POST

/api/pwgen/words

One to ten Swedish or English words.

POST

/api/pwgen/sentence

An adjective, noun, verb, and adverb.

Parameters by endpoint

JSON property names are case-insensitive. String values must be supplied exactly as shown.

`/characters`

Parameter	Type/allowed values	Default	Description
`length`	Integer, 1–128	`20`	Total password length.
`lowercase`	`true` or `false`	`true`	Includes lowercase a–z.
`uppercase`	`true` or `false`	`true`	Includes uppercase A–Z.
`numbers`	`true` or `false`	`true`	Includes digits 0–9.
`specialCharacters`	`true` or `false`	`true`	Includes the generator's special characters.
`swedishCharacters`	`true` or `false`	`false`	Adds å, ä, ö, Å, Ä, and Ö.
`specialCharacterPercentage`	Integer, 0–100	`0`	Requested percentage. Zero uses a random distribution.

`/words`

Parameter	Type/allowed values	Default	Description
`language`	`sv`, `en`	`sv`	Selects the Swedish or English word list.
`wordCount`	Integer, 1–10	`4`	Number of random words.
`casing`	`lower`, `upper`, `first`, `title`	`title`	Lowercase, uppercase, first word capitalised, or every word capitalised.
`numberPosition`	`before`, `after`, `between`, `all`	`before`	Digit sequences before, after, between, or in all positions. `between` and `all` cannot be used when `wordCount` equals 1.
`numberLength`	Integer, 0–12	`2`	Digits in each sequence. Zero means no digits and makes the position irrelevant.
`replaceSwedishCharacters`	`true` or `false`	`false`	Replaces å/ä with a and ö with o, including uppercase.
`replaceWithSpecialCharacters`	`true` or `false`	`false`	Replaces a, i, s, and h with @, !, $, and #.

`/sentence`

Parameter	Type/allowed values	Default	Description
`language`	`sv`, `en`	`sv`	Selects word lists. The result always contains an adjective, noun, verb, and adverb.
`casing`	`lower`, `upper`, `first`, `title`	`title`	Lowercase, uppercase, first word capitalised, or every word capitalised.
`numberPosition`	`before`, `after`, `between`, `all`	`before`	Digit sequences before, after, between, or in all positions.
`numberLength`	Integer, 0–12	`2`	Digits in each sequence. Zero means no digits and makes the position irrelevant.
`replaceSwedishCharacters`	`true` or `false`	`false`	Replaces Swedish characters with ASCII equivalents.
`replaceWithSpecialCharacters`	`true` or `false`	`false`	Replaces a, i, s, and h with special characters.

Example: characters

curl -X POST https://www.dadda.se/api/pwgen/characters \
  -H "Content-Type: application/json" \
  -d '{ "length": 24, "lowercase": true, "uppercase": true,
        "numbers": true, "specialCharacters": true,
        "swedishCharacters": false, "specialCharacterPercentage": 0 }'

Example: words

curl -X POST https://www.dadda.se/api/pwgen/words \
  -H "Content-Type: application/json" \
  -d '{ "language": "en", "wordCount": 4, "casing": "title",
        "numberPosition": "between", "numberLength": 2,
        "replaceSwedishCharacters": false,
        "replaceWithSpecialCharacters": false }'

Example: sentence

curl -X POST https://www.dadda.se/api/pwgen/sentence \
  -H "Content-Type: application/json" \
  -d '{ "language": "en", "casing": "first",
        "numberPosition": "after", "numberLength": 3,
        "replaceSwedishCharacters": false,
        "replaceWithSpecialCharacters": true }'

Response

{
  "password": "Example42Password",
  "length": 17,
  "type": "words"
}

Validation errors return HTTP 400. Exceeding the rate limit returns HTTP 429 with Retry-After: 60.

Open the machine-readable OpenAPI specification →