# CP Word List

> Cloudpath webhook Worker that replaces random DPSK passphrases with memorable three-word phrases (e.g. "apple-red-truck") during enrollment. Google sign-in; a dashboard stores Cloudpath API credentials and exports property-unit passphrase sheets.

All of these pages as one Markdown file: https://docs.neuralconfig.com/cp-word-list/llms-full.txt
Support: https://support.neuralconfig.com/cp-word-list

## Pages

- [What is CP Word List?](https://docs.neuralconfig.com/cp-word-list/): CP Word List is a hosted Cloudpath add-on that swaps random DPSK passphrases for memorable three-word phrases like apple-red-truck during enrollment, without changing how users connect.
- [Activate your account](https://docs.neuralconfig.com/cp-word-list/getting-started/): How to sign in to CP Word List with Google, accept the Terms and Privacy Policy, and activate the service by entering your Cloudpath server FQDN — including which servers auto-approve and which need review.
- [Cloudpath connection settings](https://docs.neuralconfig.com/cp-word-list/configuration/): The CP Word List dashboard configuration fields — Cloudpath FQDN, API username and password, SSID name, your Tenant ID and Shared Secret — plus how to test the connection and regenerate the secret.
- [Add the enrollment workflow steps](https://docs.neuralconfig.com/cp-word-list/cloudpath-workflow-setup/): How to wire CP Word List into a Cloudpath enrollment workflow — add a Send-a-notification step that calls the API Call URL and a Display-a-message step with the passphrase snippet, both after Generate a DPSK, then publish.
- [How enrollment and fallback work](https://docs.neuralconfig.com/cp-word-list/how-it-works/): What CP Word List does during a Cloudpath enrollment and re-enrollment — how the DPSK is looked up and replaced, how the new passphrase reaches the user, the 5-minute cache, and why service downtime never blocks network access.
- [Passphrase format and strength](https://docs.neuralconfig.com/cp-word-list/passphrases/): What a CP Word List passphrase looks like — three lowercase words from the EFF short word list joined by dashes, 11 to 17 characters, drawn from 1,294 words for about 2.17 billion combinations — and which parts of the format are fixed.
- [HTTP API reference](https://docs.neuralconfig.com/cp-word-list/api-reference/): The CP Word List HTTP endpoints — change-dpsk (the Cloudpath webhook), get-dpsk (the client-side lookup), and health — with their parameters, success responses, and error codes, plus the Cloudpath REST API calls made during a passphrase change.
- [Bulk DPSK export](https://docs.neuralconfig.com/cp-word-list/property-unit-export/): How to use the CP Word List dashboard to generate a Cloudpath property-unit import spreadsheet with memorable word-list passphrases pre-filled, including optional guest passphrases and the exact column layout.
- [Security controls](https://docs.neuralconfig.com/cp-word-list/security/): How CP Word List protects your data — AES-256-GCM encryption of Cloudpath API credentials with per-tenant HKDF keys, hashed dashboard access, tenant isolation, short-lived passphrase caching, session expiry, and the Cloudflare-native infrastructure it runs on.
- [Troubleshooting](https://docs.neuralconfig.com/cp-word-list/troubleshooting/): Fixes for common CP Word List problems — accounts stuck pending review, Test Connection failures, the enrollment webhook returning 401/400/404/409/502, passphrases still showing as random, and expired passphrase lookups.
- [Delete your account](https://docs.neuralconfig.com/cp-word-list/delete-account/): How to delete your CP Word List account from the dashboard's Account page — the typed-email confirmation, what is removed immediately, what is kept (your terms acceptance record), and what happens if you sign in again.
- [Limits and quotas](https://docs.neuralconfig.com/cp-word-list/limits/): Every fixed limit in CP Word List in one place — bulk export size, the 5-minute lookup window, the display snippet's 15-second timeout and 7 polls, collision retries, session and sign-up timeouts, retention periods, feedback length, and Cloudpath's own token-request limit.