Skip to content
Security

Secure Passphrase Generator

Generate cryptographically secure passphrases from a word list.

passphrasedicewaresecurewords
Loading tool…

Recommended tools

Affiliate links — we may earn a commission if you sign up.

About the Secure Passphrase Generator

The Secure Passphrase Generator produces memorable, cryptographically unpredictable passwords from a curated list of 172 easy-to-picture English words, applying the same logic that made diceware famous: every randomly chosen word adds roughly 7.4 bits of entropy, so stacking several words builds a credential that is far easier to type, say aloud, and remember than a dense character scramble. Each pick is drawn with the browser's Web Crypto randomness source, not a predictable pseudo-random generator, and the entire passphrase is assembled locally; nothing leaves your machine. The tool lets you slide the word count anywhere from three to ten words, pick a separator such as a hyphen, space, dot, underscore, or none, capitalize every word, and optionally append one random digit or symbol for sites that demand them. As you move any control, the output card regenerates instantly while a live strength label, total entropy readout in bits, and a progress bar calibrated to the 128-bit and 256-bit marks show exactly how strong the result is. A companion entropy breakdown isolates the contribution of the word list, the appended digit, and the appended symbol so you can see how each option changes the math. For anyone hunting a random word passphrase generator that favors readability over raw noise, this diceware-style passphrase generator is a dependable, transparent starting point.

Hand-written guide

Examples

Input
Word count: 4 · Separator: Hyphen · Capitalize/Number/Symbol: all off (the defaults)
Output
camel-maple-stone-yacht
Strength: Weak · 29.7 bits
Note: Four words from the 172-word list add ~7.4 bits each. Fine for low-stakes logins, but raise the count for anything important.
Input
Word count: 6 · Separator: Hyphen · Capitalize each word: on · Append a number: on
Output
Falcon-Obelisk-Meadow-Quartz-Lantern-Willow7
Strength: Fair · 47.9 bits
Note: The appended digit attaches directly to the last word and adds log2(10) ≈ 3.3 bits of entropy.
Input
Word count: 10 · Separator: Underscore · Capitalize/Number/Symbol: all off
Output
anchor_bridge_castle_dragon_engine_forest_garden_hammer_island_jungle
Strength: Strong · 74.3 bits
Note: Ten is the slider maximum, a solid master-password length once you add a digit and symbol.

How to use

  1. 1

    The passphrase appears in the Generated Passphrase card the moment the page loads, and it regenerates automatically whenever you change an option.

  2. 2

    Drag the Word count slider (3 to 10 words) to set how many words the passphrase contains.

  3. 3

    Open the Separator dropdown and pick Hyphen, Space, Dot, Underscore, or None to join the words.

  4. 4

    Flip the Capitalize each word, Append a number, and Append a symbol switches to satisfy sites with stricter requirements.

  5. 5

    Press Regenerate for a fresh draw anytime, then hit Copy to send the result to your clipboard.

Common use cases

  • Creating a memorable master password for a password manager that you must type by hand on keyboards and TVs.
  • Generating diceware-style Wi-Fi passphrases that visitors can read aloud without confusion.
  • Producing shareable credentials for shared family accounts where symbol complexity causes typos.
  • Making an easy-to-say passphrase for encrypted USB drives or encrypted notes you unlock often.
  • Teaching password hygiene by showing how each extra word adds roughly 7.4 bits of entropy.
  • Building a strong but memorable local login on Linux or macOS machines during first setup.

Best practices

  • Treat the 29.7 bits of the default four-word draw as a floor, not a goal; raise the count until the Strength label reaches Strong.
  • Never reuse a generated passphrase across more than one account; draw a fresh one per login.
  • When a site rejects separators, prefer Space or None and keep capitalization on so word boundaries remain readable.
  • Append the digit and symbol only when a site demands them; together they add roughly 6.3 bits but clutter the phrase.
  • Write master passphrases down in a sealed offline location before committing them to memory; memorable words make this practical.
  • Regenerate after sharing a passphrase with anyone, or after entering it on an untrusted device.

Tips

  • Watch the Entropy Breakdown stats while toggling options; Word entropy, Number extra, and Symbol extra show exactly which choices earn their keep.
  • The passphrase regenerates on every option change, so you can never copy a stale value.
  • Pair this with the Password Strength Checker to cross-check a new passphrase against common-word warnings.
  • For maximum strength with minimum typing, use nine or ten words and skip the special characters.

Frequently asked questions

Each word is picked through the Web Crypto randomness source used by the randomInt helper, the same cryptographically secure generator that underpins browser key creation, rather than Math.random. The generator matters more than the list: a predictable source would let an attacker replay your results. Generation happens entirely on your machine and the passphrase never leaves the page.

Explore more security tools

Browse the full collection of security tools on the hub, or jump back to all categories.