🔒 Free Security Tool

Passphrase Generator

Generate strong, memorable passphrases from random words. Easier to remember than random characters — and often more secure. Nothing leaves your browser.

— bits entropy
Number of words More words = more secure
Separator Between words
Capitalise first letter Each word
Add a number Appended to passphrase

🧠 Easy to Remember

A 5-word passphrase is far easier to remember than Xk9#mP2@qR, yet significantly more secure against brute-force attacks.

🎲 Diceware-Style

Uses the EFF long wordlist — the gold standard for passphrase generation, designed for maximum randomness and memorability.

🔒 100% Private

All generation happens in your browser using crypto.getRandomValues(). Your passphrase never touches a server.

Frequently Asked Questions

What is a passphrase?

A passphrase is a password made of multiple random words rather than random characters. Introduced by security researcher Bruce Schneier and popularised by the XKCD comic "correct horse battery staple", passphrases are both easier to remember and often more secure than short random character strings.

How many words do I need?

4 words provides ~52 bits of entropy — adequate for most accounts. 5 words gives ~65 bits — recommended for important accounts. 6+ words (~77 bits) is suitable for master passwords and highly sensitive accounts. As a rule: more words is always better.

Are passphrases more secure than random passwords?

A 6-word passphrase from a 7,776-word list has 77 bits of entropy. A random 12-character password with upper, lower, digits and symbols has about 72 bits. So yes — a long passphrase can be more secure than a short random password, and is far easier to type and remember.

Should I still use 2FA with a passphrase?

Absolutely. A strong passphrase protects you against password-guessing attacks, but 2FA protects you even if your passphrase is somehow compromised through phishing or a data breach. Use both together for best protection.

Related Tools

🔐 Password Generator Random character passwords with full options 🛡️ Breach Checker Check if your email has been in a data breach 🔑 TOTP Code Generator Generate live 2FA codes from any secret key #️⃣ Hash Generator SHA-256, MD5, and more