Passphrase generator
Random words that are easy to type and remember, picked in your browser. Your passphrase is never sent or saved.
Your password:
or press Space
Why passphrases work
A passphrase is strong because the words are drawn at random, not because they mean something. Each word comes from a list of 7,776, so every word you add multiplies the possibilities by 7,776.
| Words | Entropy | Time to try every combination |
|---|---|---|
| 4 | 52 bits | 10 hours |
| 5 | 65 bits | 9 years |
| 6 | 78 bits | 70,000 yearsDefault |
| 7 | 90 bits | 540 million years |
| 8 | 103 bits | 4.2 trillion years |
Assumes an attacker who knows the word list and makes 100 billion guesses per second.
Easy to type
Common lowercase words are quick to type on a phone and easy to read aloud.
Made to remember
Use a passphrase for the few secrets you can’t store in a password manager, like its master password or your computer login.
From the EFF list
Words come from the Electronic Frontier Foundation’s long word list (CC BY 3.0 US), built to be easy to spell and tell apart.
Questions
How many words should I use?
Six words for anything important. Seven or more for the master password of a password manager.
Is a passphrase better than a random password?
Not stronger for the same length, but much easier to remember and type. Use random passwords for accounts stored in a password manager, and passphrases for what you have to memorize.
Can I choose my own words?
Better not. People pick related, predictable words. The strength comes from the random draw.
Why are the words in English?
The EFF list is carefully built and tested in English. A passphrase doesn’t need to mean anything, so it works for speakers of any language.