---
title: "Score and analyse a password"
method: POST
path: "/password-strength.php"
tags: ["crypto"]
---

# Score and analyse a password

`POST /password-strength.php`

## Request

- Base URL: `https://mate.tools/api/v1`
- URL: `https://mate.tools/api/v1/password-strength.php`
- Auth: none declared

Computes entropy in bits, returns a 0-4 score and a strength label, identifies common-password fingerprints and keyboard sequences, and estimates time-to-crack against an offline GPU at 10^11 guesses/second. The password itself is never logged - only its metrics are returned.

## Request body

- object
  - `password` string, required

## Response `200`

Success

## Other responses

- `400`: Malformed request
- `429`: Rate limit exceeded (60/min, 600/hour per IP). Includes Retry-After header.

---

[API](https://skmtc.dev/mate/apis/mate-tools-api.md) · [All operations](https://skmtc.dev/mate/apis/mate-tools-api/llms.txt) · [OpenAPI document](https://skmtc.dev/mate/apis/mate-tools-api/revisions/874670b78962?raw)