Passphrase generator

Create a secret phrase from random English words: easy for you to remember, nearly impossible for anyone else to guess.

🔒 Your passphrase is created and stays in your browser: it is never stored or sent anywhere.

Why is a passphrase stronger than a password?

Four words drawn at random from a list of over 300 give you more than 33 bits of entropy, and every extra word adds roughly 8 more: with 5 or 6 words you beat a typical 10-character password full of symbols. The difference is that "otter-rudder-strawberry-windmill" takes seconds to memorize, while "Xk9!fRw2#p" does not. This generator uses crypto.getRandomValues — your browser's cryptographic random number generator — not plain Math.random.

Choosing a separator, number and capitals

Many sites insist on at least one capital letter, a digit or a symbol: turn on the options and keep the hyphen as separator to satisfy them without hurting memorability. The trailing number adds little entropy (about 7 bits), so if you truly want a stronger passphrase, add another word rather than a digit. Golden rule: use a different passphrase for every important account, and keep them all in a password manager.