Passphrase Generator
Generate memorable passphrases from random words. Easy to remember, genuinely strong — perfect for credentials you need to type or recall.
Generated in your browser. Words are selected using crypto.getRandomValues(). Your passphrase is never sent to our servers.
Passphrase Entropy by Word Count
Based on a 256-word wordlist (8 bits per word). Add a number (+6 bits) or symbol (+3 bits).
| Words | Entropy (bits) | Example | Strength | Est. Crack Time |
|---|---|---|---|---|
| 3 | 24 bits | able-lake-warm | Very Weak | Seconds |
| 4 ⭐ | 32 bits | able-lake-warm-echo | Fair | ~7 minutes |
| 4 + number | 38 bits | able-lake-warm-echo42 | Fair | ~8 hours |
| 5 | 40 bits | able-lake-warm-echo-mild | Fair | ~30 hours |
| 6 | 48 bits | able-lake-warm-echo-mild-iron | Strong | ~330 years |
| 6 + number ⭐ | 54 bits | able-lake-warm-echo-mild-iron42 | Strong | ~21,000 years |
| 8 | 64 bits | 8 words… | Very Strong | Billions of years |
Password vs Passphrase — Quick Comparison
| Property | Random Password (16 chars) | Passphrase (4 words) | Passphrase (6 words) |
|---|---|---|---|
| Example | kJ#9mP$vL2nX!qR7 | able-lake-warm-echo | able-lake-warm-echo-mild-iron |
| Entropy | ~105 bits | ~32 bits | ~48 bits |
| Memorisable? | Very hard | Moderate | Harder but possible |
| Typeable without paste? | Very hard | Yes | Yes |
| Best use case | Password manager stored credentials | Low/medium security, memorable needs | Master passwords, system logins |
When to Use a Passphrase
Password Manager Master Key
The one password you can never forget. A 6-word passphrase is memorable, typeable, and strong enough for this critical credential.
System Login / Disk Encryption
Credentials you type at boot or login screens where paste isn't available. A passphrase is much more typeable than a random 20-character string.
WiFi Network Password
Passwords you share with guests verbally or write on a card. A 4-word passphrase is far easier to communicate than kJ#9mP$vL2.
Low-Risk Account Without Password Manager
For accounts where you can't use a password manager and the security risk is low, a passphrase is better than a weak human-chosen password.
Frequently Asked Questions
A passphrase is a password consisting of multiple random words joined together — for example, able-lake-warm-echo. Because passphrases are longer than typical passwords, they can achieve adequate entropy while remaining considerably easier to remember and type.
The key word is random: a passphrase made from genuinely random words (as our generator produces) is much stronger than one you construct yourself from memorable phrases, which are predictable.
Four to five words is adequate for most everyday use. For high-security credentials — particularly a password manager's master password — use at least six words, optionally with a number or symbol appended.
See the entropy table above for the exact security trade-off at each word count.
It depends on the comparison. A 4-word passphrase from our 256-word wordlist provides about 32 bits of entropy — similar to an 8-character random password, which most security professionals consider inadequate today.
A 6-word passphrase with a number appended reaches ~54 bits — comparable to a 10-character random password with all character types. For pure cryptographic strength, a long randomly generated password stored in a password manager is superior. Passphrases win on memorability. See our full guide: Password vs Passphrase.
Diceware is a passphrase creation method where you roll physical dice and look up each result in a curated wordlist. The EFF large Diceware wordlist contains 7,776 words (requiring 5 dice rolls per word), providing approximately 12.9 bits of entropy per word.
Our generator uses the same principle — words are selected using crypto.getRandomValues(), which is equivalent in randomness quality to dice rolling. Our embedded wordlist is smaller (256 words, 8 bits/word), which is why we recommend more words for high-security use cases. Our dedicated passphrase page uses a full EFF-derived wordlist for maximum entropy per word.
A dictionary attack on a passphrase works at the word level rather than the character level. An attacker who knows you used a 4-word passphrase from a 256-word wordlist would need to try 256⁴ = about 4 billion combinations — already a significant brute-force task.
Importantly, this assumes the attacker knows your exact wordlist and word count. In practice, the attack space is much larger. Still, for high-value credentials, more words are always better.