Passphrase generator
A few random words make a password that is both very strong and easy to type. Here is one, ready to copy.
Sealed on this device
Runs in your browser. Nothing is uploaded.
Sealed
Your passphrase
Loading the word list…
- Strength
- —
- Entropy
- —
- Time to guess
- —
Average time for an attacker who knows the word list and tries 10 billion guesses per second.
Generated on your device. This page doesn’t keep or send your passphrase.
Settings
6 words is a good default. Add more for an account that matters a lot.
Words from the EFF Large Wordlist (7,776 words), by the Electronic Frontier Foundation, CC BY 3.0 US.
How it works
-
Choose how many words
Each word adds about 12.9 bits of strength. Six words already gives more than 77 bits.
-
Adjust the format
Pick what goes between the words, and add capitals or a digit if a website requires them.
-
Copy it and practice
Copy the passphrase, then type it a few times. A short mental image linking the words helps it stick.
Frequently asked questions
What is a passphrase?
A passphrase is a password made of several random words, such as “canyon-tidy-mustard-oxygen-ramp-velvet”. It is long, which makes it strong, and made of real words, which makes it easier to remember and type than a jumble of symbols.
Is a passphrase as secure as a random password?
Yes, if the words are truly chosen at random. Each word is picked from 7,776, so six words give 7,776⁶ possibilities, about 77.5 bits of entropy. That matches a random password of about 12 characters using letters, numbers and symbols.
Where do the words come from?
From the EFF Large Wordlist, published by the Electronic Frontier Foundation for diceware passphrases. Its words are common, easy to spell and distinct from each other. It is shared under the Creative Commons Attribution 3.0 US license.
How are the words chosen?
With your browser’s cryptographic random generator. Rejection sampling makes every word exactly as likely as any other. The result is equivalent to rolling five dice per word, as the original diceware method does.
Should I change the words to make them “more random”?
No. Swapping a word you dislike for one you prefer makes the passphrase more predictable. If you don’t like the result, generate a new one instead.
Is my passphrase sent or saved?
No. Only the public word list is downloaded. The passphrase is assembled on your device and is never transmitted or stored.