Passphrase Generator

Generate memorable multi-word passphrases with real entropy.

Type

Length20

16 or more is a good default for anything important.

Character types

Lowercase (abcdef…)

Uppercase (ABCDEF…)

Digits (0-9)

Symbols (!@#$…)

Exclude ambiguous characters

Removes O/0 and l/1/I, which matter when a password must be read aloud or typed from print.

Require one of each selected type

Satisfies strict password policies.

What does Passphrase Generator do?

Create passphrases from randomly chosen words — easy to remember and to type, hard to guess. The entropy is calculated honestly from the word list size, so you can see exactly how strong the result is.

How to Use Passphrase Generator

1
Choose the word countSix or more for anything important.
2
Pick a separatorHyphens are widely accepted by password fields.
3
Add options if requiredCapitals and a number satisfy strict policies.
4
Copy and store itA passphrase is meant to be typed, not pasted.

Key Features

Three to twelve words from a curated 250-word list
Choice of separator: hyphen, space, dot, underscore or none
Optional capitalisation and an appended number for policies that demand them
Honest entropy calculation from the actual word list size
Every word is 4–8 letters and unambiguous when spoken

Frequently Asked Questions

Are passphrases really more secure?

They can be, and their real advantage is that people actually use them. A passphrase you remember and never reuse beats a strong password you write on a sticky note. But entropy depends on word count and list size, not on the phrase feeling long.

How many words do I need?

With this 250-word list each word adds about 8 bits, so six words gives roughly 48 bits and eight gives 64. Diceware’s 7,776-word list gives 12.9 bits per word, so six Diceware words reach 77 bits. For high-value accounts, use more words or a longer list.

Does adding a number help?

Marginally — a four-digit number adds about 13 bits. Adding one more word adds about 8 bits and is easier to remember. Numbers are mostly there to satisfy password policies rather than to add real strength.

Is it safe that the word list is public?

Yes. Security comes from the randomness of the selection, not from secrecy of the list — that is Kerckhoffs’s principle. An attacker knowing the list still faces the full combination count.

Runs in your browser

This tool works with your network connection switched off. Values are produced by the browser Web Crypto API and never leave your device — no request is made, nothing is logged.

How the rest of the site handles data