Passphrase Generator

What is a passphrase, and why it beats a password you can't remember

A passphrase is a secret made of several ordinary words chosen at random — something like amber-canoe-bishop-velvet-ranger — instead of a short scrambled string like Tr0ub4dor&3. The famous xkcd comic #936 captured the insight in one panel: a handful of random common words is both easier for a human to remember and harder for a computer to crack than a short password full of substituted characters. The reason is simple. The strength of a secret comes from how many equally likely possibilities it was drawn from, and stringing together several truly random words multiplies those possibilities far faster than sprinkling symbols into one short word does. This passphrase generator gives you that memorable-yet-strong secret in a single tap, with no account and nothing leaving your device.

How this generator works

Each time you generate, the tool draws words at random from the official EFF long wordlist, bundled locally with this page. Because the list holds exactly 7,776 words, every word you add contributes about 12.925 bits of entropy — that is log2(7776). The words are picked with your browser's Web Crypto generator, crypto.getRandomValues, using rejection sampling so that every word in the list is exactly equally likely; there is no bias toward any part of the list. You choose how many words you want (three to eight), pick a separator, and optionally capitalize the words or append a random number and symbol. Formatting changes preserve the words you already chose; only New passphrase deliberately redraws the whole candidate.

Why Web Crypto matters

The single most important thing a generator like this has to get right is the source of randomness, and many quick scripts get it wrong. They use Math.random(), which is fast but not cryptographically secure: its output can be predicted from earlier values, so a knowledgeable attacker could in principle reconstruct what it produced. This tool never uses Math.random(). It uses crypto.getRandomValues, the cryptographically secure generator built into every modern browser, and it maps the raw random values into the wordlist carefully so the choice stays perfectly uniform. That is a real security property, not a marketing line.

Reading the entropy meter

The meter shows the total entropy in bits and a plain-English band. More bits means exponentially more guesses an attacker must try. As a rule of thumb, the six-word default follows EFF guidance and provides about 77.5 bits, rounded to 78 in the meter; seven words provides about 90.5 bits before any added number or symbol. The crack-time note is deliberately honest — it assumes the attacker already knows the method (so they search the word combinations, not the characters) and tries a very fast one trillion guesses per second. We only count the random word and character choices toward entropy, never the capitalization or separator, because an attacker who knows the recipe knows those rules too. When you pick too few words, the meter says the phrase is weak rather than flattering the choice.

Making it fit annoying site rules

Plenty of sites still insist that every password contain a number and a symbol, which is awkward for a pure word phrase. Toggle on Add a number and Add a symbol and the tool appends a random digit and symbol to the phrase without hurting how memorable it is, and the entropy meter accounts for the small extra randomness they add. You can also capitalize each word or switch to camelCase if a site refuses hyphens or spaces.

Passphrase vs password — when to use which

Use a memorable passphrase for the handful of secrets you actually type by hand: the master password for your password manager, your disk-encryption key, your primary email. For everything a password manager stores and fills for you, a fully random character string is perfectly fine and even more compact — for that, use our Password Generator. The two tools are siblings for the two halves of the same job. If instead you need a unique identifier rather than a secret, the UUID Generator creates RFC-compliant UUIDs, and when you simply need random numbers in a range the Random Number Generator handles that.

Your privacy

Generation is entirely in your browser. The webpage may load ordinary site assets, analytics, and one clearly separated promo, but candidate values are never inserted into a request, URL, log, localStorage, or sessionStorage — we cannot see them. Close or refresh the page and they are gone. The bundled 7,776-word list is EFF's long Diceware-style list; the method also credits Arnold Reinhold, who introduced Diceware in 1995.

Frequently asked questions