Passphrase Generator
A passphrase is several random words joined together — long enough to resist cracking, but far easier to type and remember than x7#Qp!2v. Words are drawn from a list of 1085 common English words using your browser's cryptographic random generator.
≈ 67 bits of entropy
How strong is a passphrase?
Strength comes from how many words you pick and how big the word list is. Each word from a 1085-word list adds about 10.1 bits of entropy, so six words give roughly 61 bits — fine for online accounts that limit login attempts, especially with MFA. For a password manager master password or disk encryption, use seven words or more.
The words must be chosen randomly. A phrase you invent yourself, such as a song lyric or a favourite quote, is far weaker because attackers try those first.
When to use a passphrase vs a random password
Use a passphrase for the few passwords you must type or remember: your password manager master password, your computer login, and your phone. For everything else, let a password manager create and store a random password — try our password generator.
Frequently asked questions
Are passphrases more secure than passwords?
A long random passphrase can be as strong as or stronger than a short complex password, and it is easier to remember. What matters is total length and true randomness.
How many words should a passphrase have?
With this word list, six random words is a sensible minimum for online accounts. Use seven or more for high-value secrets such as a password manager master password or disk encryption.
Is my passphrase sent anywhere?
No. It is generated in your browser with crypto.getRandomValues and never transmitted or stored.
More free security tools
Advertisement