---
title: "Check strength of the given password."
method: POST
path: "/v1/users/password_strength"
tags: ["Password Strength"]
---

# Check strength of the given password.

`POST /v1/users/password_strength`

For a given password, return information about its strength.

## Request body

- PasswordStrengthRequest
  - `password` string — Password to check the strength of

## Response `200`

OK

- UserPasswordStrengthResponse
  - `success` boolean — whether the request succeeded
  - `errors` string[]
  - `messages` string[], nullable
  - `result` object
    - `strong` boolean — Whether the given password is strong enough
    - `missed_requirements` string[] — Requirements which were not satisfied
    - `requirements` union
      - EmptyObject — Empty object
      - UserPasswordStrengthRequirements
        - `minimum_length` string — Password must be at least 8 characters long
        - `length` string — Increase password length
        - `mix_of_characters` string — Use at least 1 number and 1 symbol
        - `mixed_case` string — Use at least one UPPER case letter and at least one LOWER case letter
        - `avoid_common_passwords` string — Avoid using one of the most common passwords
        - `use_passphrases` string — NOTE: Passphrases (multiple words with spaces or dashes in between them) are better than passwords
        - `variety` string — Repeat less characters

## Other responses

- `400` — Bad Request
- `401` — Authentication failed
- `403` — Not authorized to access endpoint
- `404` — Given site not found for user
- `405` — Invalid input
- `500` — Internal error

---

[API](https://skmtc.net/rocket/apis/rocket-net-api.md) · [All operations](https://skmtc.net/rocket/apis/rocket-net-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/rocket/rocket-net-api/revisions/db0dcbbc5764/schema)