Passphrase Generator

Random words are easier to remember and just as strong. Generated locally from a 2,048-word list - 11 bits of entropy per word.

Number of words 3 – 10
5
Separator
Capitalize words Correct-Horse-Battery
Add a number appends 0–99

From Diceware to This Page

The word-list method has real history. In 1995, Arnold Reinhold published Diceware: roll five physical dice, look up the number in a list of 7,776 words, repeat. Physical dice meant provable randomness in an era when computers couldn't be trusted for it. The EFF modernized the lists in 2016, dropping obscure words and awkward homophones.

This generator applies the same math with your browser's CSPRNG standing in for the dice, drawing from 2,048 curated words - A power of two, so each word contributes exactly 11 bits (2¹¹ = 2,048) with no rounding loss.

How to actually memorize one: turn the words into a scene. For a phrase shaped like river-lantern-oak-thimble-march, picture marching past an oak holding a lantern over a river, wearing a thimble. Absurd images stick - That's the method competitive memorizers use. Type it three times and it's usually yours for good.

Why Passphrases Work

The passphrase entropy math

Each word is drawn uniformly at random from a 2,048-word list, so every word adds exactly 11 bits of entropy. Five words give 55 bits; six words give 66 bits - stronger than an 8-character random password and vastly easier to type on a phone.

The strength comes from true randomness, not word choice. A quote from your favorite book has almost no entropy, because attackers try famous phrases first. Full details in our guide: what is a passphrase?

When to use a passphrase

  • Master passwords - For a password manager like our Password Wallet.
  • Computer logins - Anything you type many times a day.
  • WiFi networks - Or use the dedicated WiFi password generator.
  • Spoken sharing - Words survive being read over a phone call.

For accounts a manager autofills, a fully random password is still the best choice. Test either kind in the strength checker.

Want the raw material? Free to reuse for your own Diceware rolls or projects.

How to Use the Passphrase Generator

1

Pick a word count

Five words is the sweet spot for most uses; six or more for a password manager master passphrase.

2

Choose a separator

Dashes are easiest to type on phones; spaces read naturally; 'none' makes a compact string.

3

Generate and copy

Each word is drawn with a cryptographically secure RNG from 2,048 words - Regenerate until one sticks in your memory.

4

Store or memorize it

Save it to the Password Wallet, or say it aloud three times - Word-images are far stickier than random characters.

Words vs. entropy vs. crack resistance (2,048-word list, 11 bits/word)

WordsEntropyGuesses neededOffline GPU attack (100B/s)
333 bits8.6 billionunder a minute
444 bits17.6 trillion~1.5 days
555 bits36 quadrillion~11 years
666 bits73 quintillion~23,000 years
777 bits1.5 × 10²³~48 million years
888 bits3.1 × 10²⁶~98 billion years

Passphrase Generator - FAQ

How many words should my passphrase have?
Four words (44 bits) is a reasonable floor for low-value accounts. Use five for anything that matters and six or more for a password manager master passphrase or disk encryption, where an attacker can guess offline at full speed.
Can I just pick the words myself?
No - That destroys the math. Humans pick related, common words (names, colors, animals) that cracking tools try first. The 11 bits per word only holds when each word is drawn uniformly at random, which is what this generator does.
Do the capitalization and number options make it stronger?
Marginally. Capitalizing adds nothing if it's predictable (first letters), and a trailing number adds about 6.6 bits. If you need more strength, add another word instead - That's 11 bits and easier to remember than remembering where the digit went.
Is correct-horse-battery-staple itself a good passphrase?
Not anymore. It's the most famous passphrase in the world thanks to the XKCD comic, and every cracking dictionary includes it. The scheme is excellent; that exact phrase is burned.

More questions about passwords and security? Browse the security guides.