Limits and quotas
CP Word List has no plans or usage tiers. Every account gets the same fixed limits, listed here. None of them can be changed per account.
Enrollment and passphrases
Section titled “Enrollment and passphrases”| Limit | Value | What happens at the limit |
|---|---|---|
| Passphrase lookup window | 5 minutes after the change | /api/get-dpsk returns 404. The new passphrase is still set on the DPSK in Cloudpath. |
| How long a mapping is stored | At most about 10 minutes | A job running every 5 minutes deletes mappings older than 5 minutes. |
| Display snippet polling | Up to 7 lookups, 2 seconds apart | The snippet shows the original Cloudpath passphrase. |
| Display snippet timeout | 15 seconds | Same fallback as above, whichever comes first. |
| Collision retries | 3 attempts per enrollment | The webhook returns Cloudpath’s 409 and the DPSK keeps its original passphrase. |
Accepted enrollmentId values | Must start with Enrollment- or Message- | The webhook returns 400 “Invalid enrollmentId format”. |
| Passphrase shape | Always 3 words, 11–17 characters | Not configurable — see Passphrase format and strength. |
Dashboard
Section titled “Dashboard”| Limit | Value | What happens at the limit |
|---|---|---|
| Units per bulk export | 1–10,000 | A larger number is capped at 10,000. See Bulk DPSK export. |
| Sign-in session | 1 hour | You’re sent back to the sign-in page. |
| Finishing sign-up (accepting the terms after Google sign-in) | 10 minutes | The pending sign-up is discarded; sign in with Google again. |
| Completing the Google sign-in round trip | 10 minutes | The sign-in page shows “Invalid OAuth state. Please try again.” |
| Activity log page size | 20 entries per page | Use the pager for older entries. |
Retention
Section titled “Retention”| Data | Kept for |
|---|---|
| Activity log entries | 90 days |
| Feedback form submissions | 90 days |
| Old-to-new passphrase mappings | About 10 minutes at most |
| Expired sign-in sessions | Deleted by a daily job |
The full list, including what is kept until you change or delete it, is in Security controls.
Feedback form
Section titled “Feedback form”Messages sent through https://wordlist.lanpulse.com/feedback can be at most
2,000 characters. A longer one is rejected with “Message must be under 2000
characters.”
Cloudpath’s own API limit
Section titled “Cloudpath’s own API limit”CP Word List authenticates to your Cloudpath server’s REST API afresh on
every enrollment webhook call and every Test Connection click — it does
not reuse tokens between calls. On cloud-hosted Cloudpath servers,
Cloudpath’s REST API guide (release 6.0 R3) limits each account or tenant to
10 API token requests per minute, so more than about ten enrollments a minute
through one Cloudpath API account can run into that limit. When Cloudpath refuses
the token, the webhook returns 502 and the activity log records auth_failed.
The same guide says on-premises and self-hosted Cloudpath servers don’t apply this limit.