Pro Password Generator

Passphrases, random passwords, and PINs in Password Pusher Pro, configured through workspace or global policy.

This article applies to: Hosted (Pro)  ·  Pro Self-Hosted

The Pro generator creates passphrases, random passwords, and PINs. Use Generate Password on text and QR push forms, the public generator page, or POST /api/v2/generate. Generated values are returned to the browser or API client and are not stored until you create a push.

Defaults come from policy, not environment variables. There are no PWP__GEN__* settings in Pro.

Open source Password Pusher uses environment variables instead. See OSS Password Generator.

Modes

Mode	What you get
Passphrase	Dictionary words in English, Spanish, French, German, or Italian, with optional capitalization, digits, and a symbol
Password	Random characters with length, character classes, optional Latin/Cyrillic/Greek letters, and ambiguous-character filtering
PIN	Digits only

When Configurable? is enabled, members can change these options in Configure (saved in cookies). When it is disabled, the UI hides those controls and the API ignores option overrides.

Where to configure

Deployment	Who	Where
Hosted Pro	Workspace admins	Admin → Application Policies → Password Generator → General and Options
Pro Self-Hosted	Instance admins	Administration Center → Application Policies → the same two sections (instance-wide)

Hosted requests use the current workspace (session, Bearer token, or custom-domain host). Do not pass a workspace id on the generate endpoint.

Policy settings

Keep Enable? and Configurable? as the two gates:

Setting	Effect
Enable?	Shows Generate Password in the UI. When off, POST /api/v2/generate returns 403.
Configurable? (self-hosted: Configurable by Users?)	Lets callers change generator options. When off, only count (batch size) may be overridden; everything else uses policy defaults.

Defaults

Setting	Description	Default
Default type	passphrase, password, or pin	passphrase
Default language	Passphrase word list: en, es, fr, de, it	en (UI also follows the visitor locale when that language has a word list)
Password length	4–128	16
Uppercase / lowercase / digits / symbols	Character classes	all on
Avoid ambiguous characters	Omit I, l, 1, O, 0, o	on
Character set	ascii, latin, cyrillic, or greek	ascii
Passphrase words	3–10	4
Passphrase separator	String between words	-
Capitalize words	Titlecase each word	on
Append numbers	Two digits	on
Append a symbol	One symbol	off
PIN length	4–12	6

Older syllable / omgopass fields (consonants, vowels, syllable counts, and related keys) are no longer used. Existing stored values are left in place and ignored; they are not converted to the new options.

Word lists

English passphrases use the EFF large wordlist (CC BY 3.0 US). Spanish, French, and Italian use BIP-39 lists. German uses the dys2p de-7776 list.

API

POST /api/v2/generate is available anonymously. Use a Bearer token when you need the signed-in workspace’s policy.

• type: password, passphrase, or pin
• count: 1–10 (default 1); allowed even when Configurable? is off
• Response includes results and entropy_bits

Generation is rate-limited (30 requests per minute per user or IP). If Enable? is off, the API returns 403.

See in-app help at /help/api or API v2. GET /api/v2/version reports features.password_generator.enabled and supported languages.