Passphrase Generator
Create strong, memorable Diceware-style passphrases from the EFF wordlist with customizable word count, separators, and numbers, free and secure.
Ready to create a passphrase
Adjust the settings and press Generate.
About this generator
A password like "Tr0ub4dor&3" is hard to type, easy to forget, and — despite the leetspeak — not actually that hard to crack. A passphrase like "correct-horse-battery-staple" flips that around: long, memorable, and dramatically harder to brute-force. This generator follows the same Diceware idea using the EFF large wordlist, 7,776 common words that each carry roughly 12.9 bits of entropy. Six words add up to about 77 bits — more than enough for most accounts, and much easier to remember than the same security in random characters.
Words are drawn with a cryptographically secure random number generator, never a predictable pseudo-random function, and never the same word twice in one passphrase. You control the word count, the separator (dash, dot, underscore, space, or none), optional title casing, and a two-digit number suffix for sites that demand a digit. If a service caps lengths at 20 characters, drop to four or five words; if it allows long passphrases, eight or more words is stronger still.
The list is embedded in the generator itself — it makes no network calls — and nothing you generate is stored or logged. As with any password tool, the output is only as secure as where you put it, so pair it with a reputable password manager.
Frequently Asked Questions
How are passphrases generated?
Each word is drawn independently from the EFF large wordlist (7,776 words) using a cryptographically secure random number generator, which makes the output unpredictable and fair.
How strong is a six-word passphrase?
Each word carries ~12.9 bits of entropy, so six words total about 77 bits — comparable to a very strong random password, but far easier to remember and type.
Why use words instead of random characters?
Length and memory win: a long phrase of common words resists brute-force attacks far better than a short string of symbols, and you can actually recall it without a manager.
Can I make a short passphrase for sites with limits?
Yes, drop to four or five words (or fewer with a number appended) to fit length caps; it's weaker than six words, but still far stronger than a typical password.
Is the output stored or transmitted?
No. The wordlist is embedded in the generator and nothing you generate is stored, logged, or transmitted anywhere.