security_password_policy_generator
Generate a password policy document and validators (regex, JSON Schema, etc.) from your complexity constraints. Includes built-in compliance baselines such as NIST 800-63B and PCI DSS 4.0.
Instructions
Password Policy Document and Validator Generator. Generate a written corporate password policy (Markdown plus rendered HTML) together with machine-readable validators (regex, JSON Schema, nginx, htpasswd, Active Directory, k8s, JavaScript, Python) from declared complexity constraints. Set operation to generate with an input object of constraints, or operation presets to list 8 built-in compliance baselines (NIST 800-63B, PCI DSS 4.0, HIPAA, ISO 27001, OWASP ASVS, Microsoft Entra, Google Workspace) you can use as a starting input. Use security_password_policy_generator to author the rules a workforce must follow; use crypto_password_generator instead to produce actual random passwords, or crypto_password_strength to score one password. Deterministic from its inputs (same input gives same document), pure compute: read-only, non-destructive, contacts no external service, no randomness, and rate-limited (30 requests/minute for anonymous callers). Returns the policy markdown and html, a validator regex, a JSON Sch
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| operation | Yes | generate builds a policy from the input object; presets ignores input and returns the 8 built-in compliance baselines. | generate |
| input | No | Policy constraints (required when operation is generate; ignored for presets). |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| success | No | Whether the request succeeded. | |
| operation | No | The operation performed (generate or presets). | |
| result | No | For generate, the policy artifacts; for presets, a presets array. |