Where do the words come from?

The EFF large wordlist (7,776 words). Each word is picked with the browser's cryptographic random source.

How many words do I need?

Three words give roughly 38 bits of entropy. Five words gets you past 64 bits, which resists offline cracking. Six or seven is comfortable for high-value accounts.

Is the passphrase generated on a server?

No. Word selection runs locally using window.crypto, so nothing leaves your device.

Passphrase Generator

Memorable, random passphrases built from real words.

Your passphrase

Strength

Bits of entropy

Each bit doubles the number of possible passphrases an attacker must try.

entropy ≈ words × log₂(7776)

< 40: weak; cracked in seconds offline.
40–60: fair; OK for low-stakes accounts.
60–80: strong; resists offline attacks for years.
80+: very strong; future-proof.

Each EFF word adds ~12.9 bits. Five words clears 64 bits.

Strong · 0 bits of entropy

Settings

Words

2 12

Separator

Capitalisation

Append a digit

Adds a single 0-9 at the end. Useful for sites that demand a number.

Append a symbol

Adds one of ! @ # $ % ^ & * ? + = at the end.

The URL below carries your settings, not your passphrase. Open it anywhere to generate a fresh passphrase with the same options.

Some inputs are too long to fit in the URL.

Share URL

Anyone with this link can read the values it contains. Do not use it for sensitive data.

How to use the Passphrase Generator

Pick how many words to use and a separator.
Optionally append a digit or symbol for sites that require them.
Hit Regenerate for a new passphrase, then copy.

Frequently asked questions

Where do the words come from?: The EFF large wordlist (7,776 words). Each word is picked with the browser's cryptographic random source.
How many words do I need?: Three words give roughly 38 bits of entropy. Five words gets you past 64 bits, which resists offline cracking. Six or seven is comfortable for high-value accounts.
Is the passphrase generated on a server?: No. Word selection runs locally using window.crypto, so nothing leaves your device.