Password Generator

Passphrase Generator — Strong, Memorable Passwords

Want a password you can actually remember without making it weak? Generate a passphrase — a handful of random words joined together, like Brave-Otter-Lantern-92. It's long enough to be very hard to crack, yet far easier to recall and type than a random jumble of symbols. Choose how many words you want and how to join them, and a new passphrase appears instantly. Every word is chosen with your browser's cryptographically secure random generator, and nothing you create is ever sent, logged, or stored.

Passphrase Generator
bits of entropy Time to crack:

Options

Words4
Separator

Generate passphrase

Generated locally in your browser — nothing is sent anywhere.
Copied

What is a passphrase?

A passphrase is a password made of several unrelated words instead of a short string of characters. Because each word is picked at random from a large list, the result is unpredictable — but because the building blocks are real words, your brain can hold onto it. This idea was popularised by "diceware", where words are chosen with dice; here, secure randomness does the rolling for you.

Why passphrases are both strong and memorable

Strength comes from entropy — the number of possibilities an attacker must search. Each random word from a list of about a thousand adds roughly 10 bits of entropy, so a four-word passphrase already carries around 40 bits, and adding words climbs quickly from there. Capitalising words, inserting a number, or adding a symbol pushes it higher still.

WordsApprox. entropyStrength
3 words~30 bitsOkay for low-risk logins
4 words~40 bitsGood — a solid everyday choice
5 words~50 bitsStrong
6+ words~60+ bitsVery strong — great for master passwords

Crucially, this strength comes from randomness, not from stringing together a memorable sentence of your own. A quote or a phrase you'd naturally think of is far more guessable than four words chosen by chance.

Passphrase vs. random password

  • Random passwords pack the most strength into the fewest characters and are ideal for accounts you never type by hand — let a password generator create them and a manager remember them.
  • Passphrases shine where a human has to type or recall the secret: your device login, your password manager's master password, or a Wi-Fi key you read aloud. They're long, strong, and friendly to type.

How to use this generator

  1. Pick the number of words — four is a good default; use five or six for a master password.
  2. Choose a separator — a hyphen, period, space, or a random number between words.
  3. Tune the extras — capitalise each word, add a number, or add a symbol to satisfy strict rules.
  4. Generate and copy, or create a batch at once and download them all.

Tips for using a passphrase

  • Use a unique passphrase per account. Never reuse the same secret in two places.
  • Use four words or more for anything important; more words means more safety.
  • Don't "fix it up" into a sentence. The random order is what makes it strong — keep it.
  • Store the ones you don't memorise in a password manager, and turn on two-factor authentication.

Frequently asked questions

Are these passphrases safe?

Yes. Every word is chosen with crypto.getRandomValues(), the browser's cryptographically secure generator. The passphrase is built and shown entirely on your device and never leaves it.

Is a passphrase really as strong as a password?

A passphrase with enough words is very strong — a five or six word passphrase rivals a long random password while staying memorable. The on-screen entropy and crack-time figures show exactly how strong each one is.

How many words should I use?

Four words is a sensible minimum for everyday accounts. For a master password or anything high-value, use five or six.

Can I generate several at once?

Yes. Use the counter next to the Generate button to create a batch, then copy or download them together.

More tools

Password Generator — Generate strong, random passwords and memorable passphrases in seconds. Pick the length and character sets you want and copy your password instantly — everything runs locally in your browser, so nothing is ever sent, logged, or stored.

PIN Generator — Generate random, secure PIN codes (3–12 digits) right in your browser. Avoid weak PINs like 1234 or 0000, create them in bulk, and copy with one click — nothing is sent anywhere.

Password Strength Checker — Test your password strength instantly. See its entropy, estimated time to crack, and exactly what to fix — all checked locally in your browser, never sent anywhere.

Password Leak Check — Check whether your password has appeared in a known data breach. Thanks to k-anonymity, only the first five characters of its hash are ever sent — your password stays in your browser.

Hash Generator — Generate MD5, SHA-1, SHA-256, and SHA-512 hashes of any text instantly. Everything is computed locally in your browser — your text is never sent anywhere.