Passphrase Generator

What is a passphrase?

A passphrase is a password made of several randomly chosen words, like Velvet-Harbor-Tulip-Rocket42-Mint-Cedar. Because it is long and the words are picked at random, it is very hard to guess, yet much easier to type and remember than k#9Qv!2xL@.

The key word is random. A phrase you make up yourself — a song lyric, a quote, your pet's name and birthday — follows patterns attackers already try. This generator picks every word with your browser's cryptographic random number generator, so each word is equally likely.

How many words do I need?

Each word from our list of about 850 words adds roughly 9.7 bits of strength. The meter above shows the exact number for your settings.

4 words (~39 bits)

Fine for low-value accounts, but crackable offline in days.

5 words (~49 bits)

Reasonable for everyday logins protected by rate limits.

6 words (~58 bits) + number

Our default. A good choice for email, banking and your password manager.

7–8 words (68–78 bits)

For master passwords and anything you cannot afford to lose.

Tips for using passphrases

• Don't swap words for your own. Replacing a random word with a meaningful one makes the phrase much weaker.
• Separators are fine either way. Hyphens and spaces make phrases easier to read; the strength comes from the words, not the punctuation.
• Use one passphrase per account, or better, one strong passphrase for a password manager that creates the rest.
• If a site rejects spaces or length, switch the separator to a hyphen or dot, or use the regular password generator.