Password Tools

Passphrase Generator

Generate memorable, secure passphrases from random words — easier to type and recall than a jumble of symbols, created 100% on your device.

Generated entirely in your browser with crypto.getRandomValues — nothing is ever sent to a server.

How to generate a passphrase

  1. Drag the word-count slider to choose how many words to include — 5–7 is a good range for most accounts.
  2. Click Regenerate until you get a passphrase you like the sound of.
  3. Click Copy to copy it, then paste it straight into your password manager.

Why passphrases are easier to remember

Human memory is much better at recalling words than random character strings. A passphrase like "cedar-otter-cobalt-dawn" gets its entropy through the sheer number of words in the pool it's drawn from, while staying easy to read aloud, type on a phone keyboard, or recall days later — something a string like "xQ7$mK2!vL9p" can't offer.

Length, entropy and word count

Each word you add multiplies the number of possible passphrases by the size of the wordlist, the same way each character multiplies the possibilities for a traditional password. The strength meter above translates the current word count directly into bits of entropy, so you can see exactly how many words you need to cross into "good" or "strong" territory.

Words are drawn from the EFF Long Wordlist by the Electronic Frontier Foundation — 7,776 words, so each one adds about 12.9 bits — licensed under CC BY 4.0.

Where passphrases work best

  • Your password manager's master password, which you'll type by hand more often than others.
  • Device passcodes and disk-encryption passwords.
  • Wi-Fi passwords you need to read out loud to guests.
  • Anywhere a strict "no symbols allowed" rule rules out a random-character password.

Related tools

Frequently asked questions

What is a passphrase, and how is it different from a password?
A passphrase strings together several random words (like "cedar-otter-cobalt-dawn") instead of random characters. It aims for the same entropy as a complex password but is built from words, which makes it much easier to read, type and remember.
Are passphrases actually as secure as random-character passwords?
Yes, when they use enough words picked from a large, random wordlist. Each additional word multiplies the number of possible combinations, similar to how each additional character does for a traditional password — with this tool's 7,776-word list, five or six words reach good entropy (about 65–78 bits) and eight or more reach strong.
Are my generated passphrases uploaded anywhere?
No. Word selection happens entirely in your browser — nothing is sent to a server, logged, or stored. Refreshing or closing the page clears it completely.
How many words should my passphrase have?
Five to six words is a solid baseline for most accounts; eight or more reaches strong (over 100 bits). Use the length slider (which controls word count here) and watch the strength meter to see the resulting entropy directly.
Can I customize the separator between words?
This tool joins words with a hyphen by default, which keeps the passphrase easy to read and type on any keyboard. If a site requires a different format, you can copy the passphrase and adjust the separator yourself before using it.
Should I add numbers or symbols to a passphrase?
You can, but it isn't necessary if the word count is high enough — most of the security comes from how many words you use and how large the wordlist is. If a site requires a digit or symbol, adding one to a long passphrase barely changes usability while satisfying the rule.
When is a passphrase better than a random password?
Passphrases shine anywhere you need to type a password by hand and recall it repeatedly — a device unlock code, a Wi-Fi password you share verbally, or a password manager master password. For passwords you'll only ever copy-paste from a manager, a fully random password is just as good.