Generate strong, memorable passphrases with the Diceware method: 3–10 random words, live entropy meter. 100% private, runs in your browser.

Home › Security & Privacy Tools › Passphrase Generator

Passphrase Generator

Create strong, memorable passwords from truly random words — the Diceware method trusted by security experts. Choose 3–10 words, copy, done.

generating…
Words: 5
3–10 words · each word adds ≈12.9 bits of entropy
Separator
Capitalization
Extras
Entropy–
Strength–
Estimated time to crack–
Randomness: crypto.getRandomValues() (never Math.random) · Word list: EFF large list — 7,776 memorable words, used with permission (CC-BY 3.0).
100% private

Passphrases are generated inside your browser. Nothing is sent, stored, or logged — close the tab and it is gone.

No signup

No account, no email, no tracking. Just press the button and copy your passphrase.

Free forever

Generate unlimited passphrases with no paywall, no limits, and no ads.

How to use the passphrase generator

  1. 1Choose your word count

    Move the slider to pick 3–10 words. Four words is plenty for most logins; use 5–6 for email, banking, or a master password.

  2. 2Pick a style

    Select a separator (space, hyphen, underscore, dot, or none), capitalization, and optional digit or symbol for sites with strict password rules.

  3. 3Generate

    Hit “New passphrase.” Every generation uses cryptographic randomness — no two results are ever alike.

  4. 4Copy and save it

    Copy the passphrase into a password manager. Never reuse the same passphrase on two different sites.

Why this generator

Crypto-grade randomness

Words are picked with crypto.getRandomValues(), the browser's secure random source — never the predictable Math.random().

Authentic EFF word list

Uses the Electronic Frontier Foundation's 7,776-word Diceware list of short, memorable, unambiguous words.

Live entropy meter

See exact bits of entropy, a strength rating, and an estimated crack time that update with every setting change.

Memorable by design

Random words like “correct horse battery staple” are far easier to remember and type than symbols soup — and mathematically stronger.

Strict-site friendly

Optional digit and symbol extras satisfy “must contain a number” rules without weakening the passphrase.

Works offline

The whole tool is one page with zero network requests — it even works with your Wi-Fi off.

Frequently asked questions

What exactly is a passphrase?
A passphrase is a password made of several ordinary words picked at random — like “correct horse battery staple” from the famous xkcd comic. Because each word is drawn from 7,776 possibilities, a 4-word passphrase has 7,776⁴ ≈ 3.6 quadrillion combinations: far beyond guessing, yet easy for a human to remember and type.
How many words do I need?
Four words (≈52 bits of entropy) defeats online guessing attacks and casual attackers — no website lets anyone try billions of passwords. Use five words (≈65 bits) for email, banking, and anything valuable, and six or more words for a password-manager master password. The entropy meter above shows the exact math for your settings.
Why are random words better than a “clever” password?
Because humans are predictable. Attackers keep dictionaries of common substitutions (o→0, e→3, ! at the end). Truly random words have no pattern to exploit — the strength comes from math (7,776ⁿ combinations), not from looking complicated.
What does the entropy number mean?
Entropy in bits measures guessing difficulty: each extra bit doubles the number of guesses an attacker needs. Fifty bits means about one quadrillion guesses. The “time to crack” line translates that into plain English at a rate of 10 billion guesses per second.
Should I add the digit or symbol?
Only if you want to. Each adds about 3 bits of strength and satisfies “must contain a number/symbol” rules on strict sites. Words alone are already strong — the extras are for compatibility, not necessity.
Is this the real Diceware method?
Yes. Diceware, invented by Arnold Reinhold, picks words from a numbered list using dice. This tool uses the EFF's improved 7,776-word list and replaces physical dice with your browser's cryptographic random number generator, which is equally unpredictable.
Do you store or see my passphrases?
No. Everything runs locally in your browser — no server, no cookies, no analytics on the generated text. For passwords you must remember long-term, store them in a reputable password manager rather than reusing them.
Scroll to Top