Updated on 2026-09-22 GMT+08:00

Checking Password Strength

This API is used to check whether the password is weak.

Each account has permissions to call all APIs, but IAM users must have the required permissions specifically assigned.

If you are using role/policy-based authorization, see the required permissions in Permissions and Supported Actions.
If you are using identity policy-based authorization, the following identity policy-based permissions are required.

Action

Access Level

Resource Type (*: required)

Condition Key

Alias

Dependencies

-

-

-

-

-

-

Action	Access Level	Resource Type (*: required)	Condition Key	Alias	Dependencies
-	-	-	-	-	-

POST /v3/{project_id}/weak-password-verification

**Table 1** URI parameters
Parameter	Mandatory	Type	Description
project_id	Yes	String	Definition Project ID of a tenant in a region. To obtain this value, see Obtaining a Project ID. Constraints N/A Range The value contains 32 characters. Only letters and digits are allowed. Default Value N/A

**Table 2** Request header parameters
Parameter	Mandatory	Type	Description
X-Auth-Token	Yes	String	Definition User token You can obtain the token by calling the IAM API by following Obtaining a User Token Through Password Authentication. Constraints N/A Range N/A Default Value N/A

**Table 3** Request body parameters
Parameter	Mandatory	Type	Description
password	Yes	String	Definition Database password. Constraints N/A Range N/A Default Value N/A

Status code: 200

**Table 4** Response body parameters
Parameter	Type	Description
weak	Boolean	Definition Whether the password is a weak password. Range true: It is a weak password. false: It is not a weak password.

Checking password strength

POST https://{Endpoint}/v3/619d3e78f61b4be68bc5aa0b59edcf7b/weak-password-verification 

{ 
  "password" : "xxxx" 
}

Status code: 200

Success

{ 
  "weak" : false 
}

For details, see Status Codes.

For details, see Error Codes.

Parent topic: Instances