Passphrase Generator

Real words from the EFF short word list (1,296 words), 3–8 of them, with a separator, capitals, a number and a symbol — and the word list shown so you can learn it.

Generate a memorable passphrase from real words — three to eight words from the EFF short wordlist, joined with a separator, with optional capitals, a number and a symbol. Picked with the browser's cryptographic random generator; nothing is sent or stored.

A password you think up yourself is usually one a script can guess — five or six words picked at random from a list are not.

Real words, real randomness, made on your device. Never sent anywhere.

Pick the options and generate

Runs in your browser — nothing is uploaded, nothing is stored. Close the tab and it is gone.

After the passphrase

One passphrase to remember, a manager for the rest

Your logins todayYour logins, behind one passphrase

Left: several passwords you try to remember, so they end up short, similar or the same everywhere. Right: one passphrase of five or six random words that you learn by heart. It unlocks a password manager that keeps a different random password for every other account.

  • Five or six random words for the password you type by hand
  • A password manager holding a different password for each account
  • Two-factor on the email that resets everything else
900+ projects
since 2017
4.9★
400+ five-star reviews on Fiverr
9+ years
building WordPress and Next.js sites

Support is the whole team, not one person — reach us any time, and someone picks it up.

“He was able to deliver what was needed.”
Build Smart And Save · 3-page WordPress site · the project

Schedule a Meeting

Bring the site or the page you are working on. I lead every project, and on the call we go through it together and decide what to do first.

Schedule a Meeting

How it works

How to use the Passphrase Generator

  1. 01Pick 3–8 words, a separator, capitals, a number and a symbol, then generate.
  2. 02Read the word list underneath — that is what makes it learnable — and the entropy in bits.
  3. 03Copy it into your password manager.

Good to know

Why a passphrase

A run of real words is far longer than a typical password, and length is what defeats brute force; the word list is the part you remember.

In more depth

About the passphrase generator

How a random-word passphrase works

A passphrase trades a short jumble of characters for a longer string of ordinary words. "Trick3-Ozone-March-Truck-Fetch" has 30 characters and about 61 bits of entropy, yet you can hold it in your head after reading it twice. The security does not come from the words being unusual; it comes from each one being chosen at random from a known list, so an attacker gains nothing by knowing the list.

This page uses the EFF short wordlist (1,296 words, CC-BY 3.0, Electronic Frontier Foundation), the same list used for Diceware-style generation with four dice.

Passphrase or password manager?

Both. A manager stores a different random password for every site; a passphrase is what you memorise to unlock the manager, your laptop and your phone. One strong passphrase you can remember plus a manager for everything else is the setup security teams recommend.

FAQ

Passphrase Generator — questions

Is a passphrase as strong as a random password?

It can be. Each word from the 1,296-word EFF list adds about 10.3 bits; five words are roughly 52 bits and six about 62, plus about 9 more for a number (0–99, added after a random word) and 3 for a symbol. A random password from all 95 keyboard characters gets about 6.6 bits a character, so five words match an 8-character random password and six words a 9- to 10-character one — and the words are far easier to type and remember.

Why use a wordlist instead of just any words?

Because words you think of yourself are not random — people pick the same ones. The EFF short list was designed for this: common, short, easy to spell, and every word equally likely when chosen by a random number.

Where should I use a passphrase?

Anywhere you have to type the password by hand: your computer login, a password manager's master password, Wi-Fi, disk encryption. For accounts stored in a manager, a random password is fine.

Does adding a number or symbol help?

Some. The number (0–99, after a random word) adds about 9 bits and the symbol 3, and both satisfy sites that demand them. A sixth word adds about 10.3 bits, more than either.

More tools

The other tools

All tools

Next step

Need a tool that does not exist yet?

Small internal tools like these are a normal part of the work — tell me what your team does by hand.