Passphrase Generator
Random word passphrases with honest entropy math โ generated locally.
About this generator
Random words, cryptographically drawn, joined into a passphrase you can actually
remember and type: maple-lantern-echo-harbor-flint. Choose word count and
separator, optionally capitalise or slot in a number, and the entropy readout updates
honestly โ because the strength claim, not the styling, is what matters.
Why words beat line noise
The famous XKCD comic was right, and the maths is simple: strength is
combinations, and combinations come from genuine randomness, not from how weird a
password looks. Each word drawn uniformly from this 815-word list adds ~9.7 bits of
entropy, so five words is ~48 bits and seven is ~68 โ while Tr0ub4dor&3
style substitutions add almost nothing, because attackers try them first. The honest
frame this tool uses: assume the attacker knows the method and the word list
(Kerckhoffs's principle); the security lives entirely in which words were drawn,
which is why the draws use the Web Crypto RNG rather than Math.random. Where
passphrases shine: master passwords, disk encryption, WiFi โ anywhere typed by a
human. Where they don't matter: accounts inside a password manager, where
random character passwords can be as ugly as they like.
Check anything against the strength meter, and read
the honest length guide for the full
picture.
Frequently asked questions
How many words should my passphrase have?
Five (~48 bits) suits ordinary accounts; six to seven (~58-68 bits) suits master passwords and disk encryption. Each word from this list adds about 9.7 bits.
Is a passphrase really stronger than P@ssw0rd1?
Vastly. Substitution patterns are the first thing cracking software tries, so they add almost no real entropy. Five genuinely random words have ~48 bits โ billions of times more combinations than any dictionary word with symbols bolted on.
Does it matter that attackers could know the word list?
No โ that's the design assumption (Kerckhoffs's principle). The strength is the number of possible draws, not the secrecy of the method: 815โต is about 360 trillion five-word phrases.
Is the passphrase stored or sent anywhere?
No โ generated on your device with the cryptographic RNG, shown once, kept nowhere. Copy it into a password manager; regenerate freely.