Skip to content
DYNAMB

Passphrase generator

For a password you must actually type from memory — unlocking a laptop, a Wi-Fi router, a password manager's master password — a passphrase of several random ordinary words beats a jumble of symbols on every count that matters: it is easier to remember, faster to type correctly, and (because it draws from a large word list) carries plenty of entropy despite looking simple.

  • Nothing you type leaves this page
  • Works offline once loaded
  • Free forever, no signup
{{ value || '—' }}
  • Strength {{ strength.label }}
  • Entropy {{ entropyBits }} bits
  • Offline attack {{ crackTime }}

Generated with your browser's cryptographic random number generator. Nothing is sent anywhere, and nothing is remembered once you close the page — copy it into your password manager before you leave.

How to use this tool

  1. Set the word count

    Four or five random words is comfortably strong for most uses; go higher for a master password.

  2. Pick a separator

    A hyphen is the diceware convention, but you can switch to a space or nothing at all.

  3. Copy it somewhere you will actually remember

    Say it out loud a couple of times — that is usually enough to commit a 4-word phrase to memory.

Questions people ask

Why is a passphrase better than a password I have to remember?

Human memory is much better at holding a short sequence of ordinary words than an arbitrary jumble of letters, digits and symbols of the same length — and because a passphrase is also faster and less error-prone to type, people are less likely to shorten it or reuse it elsewhere out of frustration.

Is four random words really strong enough?

It depends on the word list size — this generator draws from a list large enough that four words already sit well past the "reasonable" strength threshold shown live under the output, and five words comfortably clears the bar most security guidance sets for a master password.

Should I add numbers or symbols to my passphrase?

You can, with the "add a number" option, but it is not necessary for strength — the entropy of a diceware-style passphrase comes from the size of the word list and the number of words, not from decoration. Add a number only if a specific site's rules force you to.

What is diceware, and does this actually use it?

Diceware is the practice of generating passphrases by rolling physical dice to pick words from a numbered list — the point being provably unbiased randomness. This generator gets the same statistical property from crypto.getRandomValues instead of real dice, picking uniformly at random from its word list.

Is the passphrase sent anywhere when it is generated?

No — it is created entirely in your browser and never transmitted, logged or stored. You can disconnect from the internet and the generator still works, which is the actual proof, not just a claim.

Related tools

Bookmark this page — the tool keeps working offline, and your settings stay in this browser. Built by Dynamb Technologies, who make software for a living.