--- title: "Awkward passwords for a sign-up form's password field | Proxy Mail QA" description: "Developer docs for Proxy Mail QA: the MCP server for coding agents, the REST API for test suites, and the Chrome extension." url: https://proxymail.qa/docs/reference/operations/passwordvariants --- # Awkward passwords for a sign-up form's password field GET /v1/variants/passwords ```js const url = 'https://api.proxymail.qa/v1/variants/passwords?min_length=8&max_length=64&symbols=true'; const options = {method: 'GET', headers: {Authorization: 'Bearer '}}; try { const response = await fetch(url, options); const data = await response.json(); console.log(data); } catch (error) { console.error(error); } ``` ```sh curl --request GET \ --url 'https://api.proxymail.qa/v1/variants/passwords?min_length=8&max_length=64&symbols=true' \ --header 'Authorization: Bearer ' ``` Values for testing what a form does with a password, within its rules: accept (exactly the minimum and the maximum, each symbol class including quotes, a backslash and a space, non-ASCII letters), reject (one under the minimum, one over the maximum, a symbol where none are allowed) and decide (only digits, only lower case, a space at the start or end, an emoji, composed and decomposed accents, and when the maximum is over 72 a pair sharing their first 72 bytes, which bcrypt stops at: apps differ, so note what the app did). Each call makes fresh values. See . ## Authorizations - **[apiKey](https://proxymail.qa/docs/reference.html#apikey)** ## Parameters ### Query Parameters **min\_length** integer default: 8 \>= 1 <= 256 The field’s minimum length. **max\_length** integer default: 64 \>= 1 <= 1024 The field’s maximum length. **symbols** boolean default: true Whether the field allows symbols. ## Responses ### 200 The variants Media typeapplication/json ### object **min\_length** integer **max\_length** integer **symbols** boolean **accept** Array