Passphrase generator (diceware)
Random-word passphrases are easy to remember and hard to crack. Generated locally with a secure random source.
6
How to use the passphrase generator (diceware)
- Choose the number of words and options.
- Press Generate.
- Copy the passphrase: use 6+ words for strong security.
Why passphrases work
A string of random words is both easier to remember and, at enough words, stronger than most typical passwords, because total length drives security. This generator picks words with your browser's secure random source; nothing is sent anywhere. For maximum strength use 6+ words. (Our word list is compact for memorability; for the highest-entropy diceware, use a dedicated 7,776-word list.)
Code & API examples
Use this from the command line or your code.
Shell
shuf -n6 /usr/share/dict/words | paste -sd-See all endpoints at /api/tools/.
Frequently asked questions
A passphrase of 5-6 random words is both easier to remember and stronger than most typical passwords, because total length drives security.
A method of building passphrases by selecting random words from a large list, giving high entropy that's still human-memorable.
Five random words is a strong baseline; six or seven for accounts you really care about. Each additional word multiplies the number of possible passphrases dramatically.
A sentence you compose follows grammar and common phrasing that cracking tools model. Independently random words have no such structure, so each word adds full unpredictability.
Yes: words are chosen in your browser with the cryptographically secure random generator, and the passphrase is never sent or stored anywhere.
From a list of roughly 7,776 words, each word adds about 12.9 bits of entropy. Five words give about 64 bits, six give about 77: well past what brute force can reach.
Spaces or hyphens between words help readability, and a number or symbol satisfies picky sites, but the word count is what carries the strength. Don't shorten the phrase to add complexity.
Yes: a long random passphrase is an excellent master password for a manager or disk encryption, since it's memorable yet has enough entropy to resist offline attacks.
Use fewer but still random words, or switch to a random character password for that site. Never cut to three words just to fit a low cap.
Use them as given. Swapping in words you find more memorable reintroduces personal bias and predictability, which lowers the entropy the random draw gave you.
Single-word or themed phrases are, but a passphrase of several independently random words has so many combinations that running a word-list attack is computationally hopeless.
Once, then save it in a password manager and rely on autofill. Choosing all-lowercase words with simple separators also makes the rare manual entry quicker.
Want to hide your IP for real?
vpn.golf is a no-logs WireGuard VPN. Pick a hole, take the shot.
Step up to the tee for free