Regex Cheat Sheet for Backend Developers

A quick-reference sheet for the regex symbols, character classes, and validation patterns that come up constantly in backend work — API input validation, log parsing, and data cleaning. Everything here is a static reference; if you'd rather describe what you need in plain English and have a pattern generated for you, use the free Regex Generator instead.

Basic Regex Symbols

• . — any character except a newline
• * — zero or more of the preceding token
• + — one or more of the preceding token
• ? — zero or one (makes the preceding token optional)
• {n,m} — between n and m repetitions
• ^ / $ — start / end of string
• | — alternation ("or")
• () — capturing group; (?:) — non-capturing group

For lookahead/lookbehind and greedy-vs-lazy quantifiers — the two things that trip up most people past the basics — see regex lookahead and lookbehind explained and non-greedy vs greedy matching.

Character Classes

[abc]      -> a, b, or c
[a-z]      -> any lowercase letter
[A-Z]      -> any uppercase letter
[0-9]      -> any digit
[^0-9]     -> anything that is NOT a digit
\d         -> digit, shorthand for [0-9]
\w         -> word character, shorthand for [A-Za-z0-9_]
\s         -> whitespace (space, tab, newline)

Validation Pattern Reference

The URL pattern above requires an explicit http(s):// prefix; for a version that also accepts bare domains, www., localhost, and IP addresses with ports, see regex for URL validation in JavaScript. For Aadhaar, PAN, GST, IFSC, passport, and driving license patterns — plus which of these regex can and can't fully verify — see the complete guide to Indian ID and document regex validation. For 50 more copy-paste patterns organized by category, see 50 ready-to-use regex patterns for developers.

Using These Patterns in Code

// Node.js
const phoneRegex = /^(\+91)?[6-9]\d{9}$/;
phoneRegex.test("9876543210"); // true

# Python
import re
pattern = r"^(\+91)?[6-9]\d{9}$"
bool(re.match(pattern, "9876543210"))  # True

Java and JavaScript both need the pattern wrapped as a string literal with backslashes escaped; Python's raw string prefix (r"...") lets you paste a pattern as-is without doubling the backslashes.

Common Backend Use Cases

• Validating API request bodies before they hit business logic
• Enforcing password strength rules at signup
• Extracting structured fields (IPs, error codes, timestamps) out of log lines
• Parsing or cleaning malformed CSV rows before import
• Validating identifiers like PAN, GST, or SKU codes on form submission

Regex Patterns Interviewers Commonly Ask You to Write

These come up often enough in backend interview rounds that they're worth being able to write from memory, not just recognize:

• Email validation — see the pattern in the table above.
• Find duplicate consecutive words — \b(\w+)\s+\1\b, using a backreference (\1) to check the same word appears twice in a row.
• Extract all numbers from a string — \d+ with the global flag, e.g. "order 12 has 3 items".match(/\d+/g) in JavaScript.
• Enforce password rules — see the strong-password pattern in the table above, which uses lookahead assertions to require multiple character classes without fixing their order.

Practicing writing these from scratch is more useful than memorizing them — try the Regex Generator with your own prompt, then compare what it produces to what you'd have written by hand.

Frequently Asked Questions