Passphrase Generator
Generate easy-to-remember, highly secure passphrases using standard cryptographic dictionaries.
Recent History
Why use passphrases?
Passphrases combine multiple words randomly selected from a pre-defined catalog. Because a 4-word passphrase has a potential dictionary search breadth exceeding billions of variations, it is mathematically more difficult to break than complex short passwords, while remaining exceptionally easy to type and remember.
Introduction
The Passphrase Generator builds high-entropy credentials using multiple random English words from the EFF Diceware list. Unlike traditional complex passwords that are hard to remember, passphrases utilize length to resist brute-force cracks. They are highly memorable for human users but mathematically secure against dictionary attack programs.
What This Tool Does
The Passphrase Generator builds high-entropy credentials using multiple random English words from the EFF Diceware list. Unlike traditional complex passwords that are hard to remember, passphrases utilize length to resist brute-force cracks. They are highly memorable for human users but mathematically secure against dictionary attack programs.
How It Works
The tool selects random numbers to correspond with keys in the EFF Diceware English wordlist. Each word represents approximately 12.9 bits of entropy. A five-word passphrase provides over 64 bits of security, resulting in millions of possible combinations that dictionary crackers cannot easily calculate.
Benefits
- Easy memorization: Simple English words are easier to recall than string sequences.
- Superior length: Length provides the strongest defense against cracking hardware.
- Zero network logs: Operates completely offline.
Security Information
We utilize standard EFF Diceware arrays compiled client-side. The local script executes inside your browser sandbox and guarantees offline security.
Best Practices
- Select a minimum of 4 to 5 words for basic logins.
- Use hyphens or periods as separators to break simple search dictionaries.
- Do not construct logical sentences, as grammatical rules reduce randomness.
Frequently Asked Questions
What is a Passphrase Generator?
A passphrase generator creates passwords by combining multiple random words into a single phrase. Unlike traditional passwords that use random characters (like "x7$kL9!m"), passphrases use real words (like "correct horse battery staple") to create passwords that are both extremely secure and easy to remember. The concept was popularized by the XKCD comic strip "Password Strength."
Our passphrase generator uses the EFF large wordlist with 7,776 carefully selected English words. Each word adds approximately 12.92 bits of entropy. A typical 6-word passphrase provides about 77.5 bits of entropy, making it resistant to brute-force attacks while remaining memorable enough to type from memory.
How Passphrase Entropy Works
The security of a passphrase depends on its total entropy, which is calculated as: entropy = number_of_words x log2(wordlist_size). With the EFF 7,776-word list, each word provides log2(7,776) ≈ 12.92 bits of entropy. A 4-word passphrase provides about 51.7 bits, while a 6-word passphrase provides about 77.5 bits.
Our generator uses the Web Crypto API to generate cryptographically secure random numbers for word selection. This ensures each word is chosen with uniform randomness from the entire wordlist, preventing any predictable patterns. The words are joined with customizable separators (spaces, hyphens, dots, or none).
Additional security can be added through capitalization, number appending, and symbol insertion. Each modification adds entropy while maintaining readability. However, the base word selection provides the primary security, with these additions serving as extra protection.
Where to Use Passphrases
Master Passwords: Passphrases excel as master passwords for password managers. You need one extremely strong password that protects all your other credentials, and a 6-8 word passphrase provides that security while remaining memorable.
Disk Encryption: Full-disk encryption tools like BitLocker, FileVault, and LUKS require strong passphrases. A passphrase protects your entire hard drive against physical theft and offline attacks.
SSH Keys and GPG: When protecting private keys with a passphrase, it provides the ideal balance of security and usability. You can type the passphrase from memory without exposing it to keyloggers.
Wi-Fi Network Keys: For WPA2/WPA3 personal mode networks, a passphrase serves as a strong network password that guests can easily type without errors.
Common Passphrase Mistakes
Using Too Few Words: A 3-word passphrase provides only about 38.8 bits of entropy, which can be cracked in minutes with modern hardware. Aim for at least 6 words for most use cases, and 8 or more for protecting encryption keys.
Choosing Words Manually: The security of passphrases depends entirely on randomness. If you select words yourself, your choices are predictable and can be guessed much more easily. Always let the generator pick the words randomly.
Using Common Phrases: Avoid well-known phrases like "to be or not to be" or "the quick brown fox." These are in every attacker's dictionary. Random word combinations are essential for security.
Not Using Separators: Words without separators (like "correcthorsebatterystaple") can be harder to read and type correctly. Using dots, hyphens, or spaces between words improves usability and reduces typing errors.
Related Passphrase Tools
Explore these additional passphrase and password generation tools:
- Diceware Generator — Generate Diceware passphrases using the EFF wordlist.
- XKCD Generator — Create XKCD-style passphrases inspired by the famous comic strip.
- Memorable Password Generator — Create memorable passwords with word-number combinations.
- Password Entropy Calculator — Calculate the entropy bits of your passphrase.
- Password Strength Checker — Test your passphrase strength against dictionary attacks.