Passphrase Generator
Generate a secure passphrase from several random words, easy to remember and type yet strong enough for master passwords and disk encryption.
Words are chosen locally with the Web Crypto API. Nothing is sent to our servers.
No value yet. Press Regenerate.
This is an estimate based on random generation, not on whether a leaked password has been reused.
Generated locally in your browser. Nothing is sent to our servers, logged or stored.
Password versus passphrase
A passphrase joins several randomly chosen words, an approach popularized by Diceware. Because each word is picked at random, a handful of words produces strong entropy while staying far easier to recall than a random character string.
This makes passphrases ideal for the few secrets you must type or memorize, such as a password manager master password or a disk encryption key. For everything else, let a manager store long random passwords.
Best practices
- Use 5 or more random words; each word from a 256 word list adds 8 bits of entropy.
- Keep the words truly random, do not swap in a memorable phrase of your own.
- Add a separator, capitalization or a number only if a policy requires it.
More secret generators
Every generator below is the same local, Web Crypto powered tool, preset for a different job. Nothing you generate leaves your browser.
- Secure Password GeneratorPasswords, secrets, tokens and PINs in one place.
- OpenSSL Rand Generatoropenssl rand style base64 and hex secrets.
- JWT Secret GeneratorStrong HS256 signing secrets for JWT.
- API Key GeneratorOpaque, high entropy keys for API auth.
- Random Token GeneratorSession, reset and verification tokens.
- PIN GeneratorQuick numeric PIN codes.
Frequently asked questions
Are passphrases secure?
Yes, when the words are random and there are enough of them. Six random words from a 256 word list give 48 bits, and longer phrases scale up quickly, all while staying memorable.
How many words should I use?
Five is a reasonable minimum and six or more is better for high value secrets. More words mean more entropy at the cost of a little extra typing.
What is Diceware?
Diceware is a method that maps dice rolls to words in a list to build random passphrases. This tool follows the same idea using the Web Crypto API instead of physical dice.
Can I type a passphrase into any login?
Yes. A passphrase is just a password made of words. Use it anywhere a password is accepted; it is simply easier to remember.