Security

Passphrase Generator

Generate secure passphrases from random words. Ideal for master passwords and encryption keys you need to memorize. Free, browser-based, no signup.

About this passphrase generator

A passphrase is a password made of multiple random words — like "marble-sunset-notebook-river" — instead of a string of random characters. The concept was popularized by the XKCD comic "correct horse battery staple" and formalized by the Diceware method. Passphrases solve a specific problem: they provide high entropy while remaining memorable enough to type without a password manager. A four-word passphrase from a large word list provides roughly 50-60 bits of entropy; six words provides 75-90 bits. The trade-off is length — passphrases are typically 20-40 characters long but far easier to remember than a 16-character random string. Use passphrases for your password manager master password, full-disk encryption passphrase, or any credential you must memorize. For everything else, use a shorter fully random password stored in your manager.

FAQ

Common questions

How many words should my passphrase have?

At least four words for moderate security (~50-60 bits). Six words for high security (~75-90 bits). For a password manager master password, six words is the recommended minimum.

Should I add numbers and symbols to a passphrase?

Adding a number and symbol (e.g., "marble-sunset7-notebook!river") increases entropy by roughly 10-15 bits and makes the passphrase resistant to pure dictionary attacks. It is a worthwhile addition for minimal memorability cost.

Is a passphrase stronger than a regular password?

Per character, no — passphrases have lower entropy density. But a 6-word passphrase (~77 bits) that you can actually remember and type correctly is far more practical than a 12-character random string (~79 bits) that you will write on a sticky note.

What word list should passphrases use?

The EFF Diceware list (7,776 words) is the standard. Each word contributes ~12.9 bits of entropy. Avoid using common phrases, song lyrics, quotes, or personally meaningful words — the words must be randomly selected.

More in Security