Want a password you can actually remember without making it weak? Generate a passphrase — a handful of random words joined together, like Brave-Otter-Lantern-92. It's long enough to be very hard to crack, yet far easier to recall and type than a random jumble of symbols. Choose how many words you want and how to join them, and a new passphrase appears instantly. Every word is chosen with your browser's cryptographically secure random generator, and nothing you create is ever sent, logged, or stored.
A passphrase is a password made of several unrelated words instead of a short string of characters. Because each word is picked at random from a large list, the result is unpredictable — but because the building blocks are real words, your brain can hold onto it. This idea was popularised by "diceware", where words are chosen with dice; here, secure randomness does the rolling for you.
Strength comes from entropy — the number of possibilities an attacker must search. Each random word from a list of about a thousand adds roughly 10 bits of entropy, so a four-word passphrase already carries around 40 bits, and adding words climbs quickly from there. Capitalising words, inserting a number, or adding a symbol pushes it higher still.
| Words | Approx. entropy | Strength |
|---|---|---|
| 3 words | ~30 bits | Okay for low-risk logins |
| 4 words | ~40 bits | Good — a solid everyday choice |
| 5 words | ~50 bits | Strong |
| 6+ words | ~60+ bits | Very strong — great for master passwords |
Crucially, this strength comes from randomness, not from stringing together a memorable sentence of your own. A quote or a phrase you'd naturally think of is far more guessable than four words chosen by chance.
Yes. Every word is chosen with crypto.getRandomValues(), the browser's cryptographically secure generator. The passphrase is built and shown entirely on your device and never leaves it.
A passphrase with enough words is very strong — a five or six word passphrase rivals a long random password while staying memorable. The on-screen entropy and crack-time figures show exactly how strong each one is.
Four words is a sensible minimum for everyday accounts. For a master password or anything high-value, use five or six.
Yes. Use the counter next to the Generate button to create a batch, then copy or download them together.
Password Generator — Generate strong, random passwords and memorable passphrases in seconds. Pick the length and character sets you want and copy your password instantly — everything runs locally in your browser, so nothing is ever sent, logged, or stored.
PIN Generator — Generate random, secure PIN codes (3–12 digits) right in your browser. Avoid weak PINs like 1234 or 0000, create them in bulk, and copy with one click — nothing is sent anywhere.
Password Strength Checker — Test your password strength instantly. See its entropy, estimated time to crack, and exactly what to fix — all checked locally in your browser, never sent anywhere.
Password Leak Check — Check whether your password has appeared in a known data breach. Thanks to k-anonymity, only the first five characters of its hash are ever sent — your password stays in your browser.
Hash Generator — Generate MD5, SHA-1, SHA-256, and SHA-512 hashes of any text instantly. Everything is computed locally in your browser — your text is never sent anywhere.