Why Use This Tool?
Passphrases solve the memorability problem: correct-horse-battery-staple is easier to remember than kX9#mP2$vL but carries similar entropy. Each word is drawn randomly from a 1000+ word dictionary, and the entropy grows linearly with word count.
Five random words from a 1000-word dictionary gives about 50 bits of entropy — strong enough for most accounts. Add a random number and it's 56+ bits.
How It Works
- Choose how many words (5 is the sweet spot).
- Pick a separator and whether to capitalize words.
- Generate and copy — or add a random number suffix for extra entropy.
What Is a Passphrase?
A passphrase is a password made from multiple random words instead of random characters. It's easier to remember and type while providing equivalent or better entropy, especially when the word list is large and the selection is truly random.
Common Use Cases
- Account passwords you need to type manually
- WiFi passwords shared with guests
- Disk encryption passwords
- Master passwords for password managers
Frequently Asked Questions
How does a passphrase compare to a random password?
A 5-word passphrase from a 1000-word dictionary has about 50 bits of entropy — similar to a 10-character random password. But the passphrase is much easier to remember and type.
What dictionary does it use?
A curated list of 1000+ common English words, chosen to be short, easy to spell, and distinct from each other.
Is this really secure?
Yes, if the word selection is truly random. The tool uses crypto.getRandomValues, the same cryptographic source browsers use for security tokens.
How many words should I use?
Five words is the sweet spot — about 50 bits of entropy. Seven words give 70 bits. Three words is the minimum for anything important.
Tips & Things to Watch
- Five words is the sweet spot — strong enough and still memorable.
- Capitalize words to make the passphrase easier to read and type.
- Add a number suffix when the site requires a digit.
- Use passphrases for things you'll type regularly — random strings for storage-only passwords.