Simple GET API.

create.pw exposes three GET endpoints for PINs, passwords and word-based passphrases. Every API request is rate limited to 10 requests per minute per IP, and responses are returned as plain text.

/pin/{length}

Returns a numeric PIN with the requested length.

GET /pin/4
GET /pin/6

/pw/{length}

Returns a random password using uppercase, lowercase, digits and special characters.

GET /pw/8
GET /pw/20

/words/{length}

Returns random words joined with a random separator from -, . or _.

GET /words/4
GET /words/8

Rules

  • All endpoints use GET only.
  • Minimum supported length is 4.
  • Maximum supported length is 30.
  • Responses are returned as plain text.

Safety

  • Strict integer validation on all lengths.
  • No shell execution, no eval, no dynamic includes from user input.
  • Per-IP file-locked rate limiting.
  • Cryptographically secure randomness via PHP random_int().