Password Generator API

Quick start

Send a GET request to https://api.suggestpassword.com/. With no parameters you get one 20-character password:

curl "https://api.suggestpassword.com/?length=20"

{
  "generated_password": "x7Kq#bT2mW!pZr9&LdYe",
  "passwords": ["x7Kq#bT2mW!pZr9&LdYe"],
  "type": "password",
  "entropy_bits": 119.7
}

generated_password is always the first result; passwords holds all of them when you ask for more than one.

Try it

Press "Send request" to call the live API.

Parameters

Every character type you enable is guaranteed to appear at least once. The older advanced=true parameter still works and means symbols=all.

Examples

Ten 32-character passwords with every symbol:

curl "https://api.suggestpassword.com/?length=32&symbols=all&count=10"

A six-word passphrase separated by spaces:

curl "https://api.suggestpassword.com/?type=passphrase&words=6&separator=space"

JavaScript:

const res = await fetch('https://api.suggestpassword.com/?length=24&no_ambiguous=true');
const { generated_password } = await res.json();

Python:

import requests
pin = requests.get('https://api.suggestpassword.com/', params={'type': 'pin', 'length': 6}).json()['generated_password']

OpenAPI, AI assistants and agents

The API is described in an OpenAPI 3.1 specification, so you can import it into Postman, Insomnia or a code generator, or hand it to an AI agent as a tool definition. For language models and AI search there's also a plain-text summary at /llms.txt.

Building an agent? Give it the OpenAPI URL and it can generate passwords for your users on request. Do remind it that a password generated by a service passes through that service; generating locally is safer for real accounts.

Errors and limits

Invalid input returns HTTP 400 with a message, for example {"error": "length must be a whole number between 4 and 128"}. Too many requests return HTTP 429; slow down and retry. Responses are never cached.