Passphrase generator (diceware)
Random-word passphrases are easy to remember and hard to crack. Generated locally with a secure random source.
6
How to use the passphrase generator (diceware)
- Choose the number of words and options.
- Press Generate.
- Copy the passphrase — use 6+ words for strong security.
Why passphrases work
A string of random words is both easier to remember and, at enough words, stronger than most typical passwords — because total length drives security. This generator picks words with your browser's secure random source; nothing is sent anywhere. For maximum strength use 6+ words. (Our word list is compact for memorability; for the highest-entropy diceware, use a dedicated 7,776-word list.)
Code & API examples
Use this from the command line or your code.
Shell
shuf -n6 /usr/share/dict/words | paste -sd-See all endpoints at /api/tools/.
Frequently asked questions
A passphrase of 5-6 random words is both easier to remember and stronger than most typical passwords, because total length drives security.
A method of building passphrases by selecting random words from a large list, giving high entropy that's still human-memorable.
Five random words is a strong baseline; six or seven for accounts you really care about. Each additional word multiplies the number of possible passphrases dramatically.
A sentence you compose follows grammar and common phrasing that cracking tools model. Independently random words have no such structure, so each word adds full unpredictability.
Yes — words are chosen in your browser with the cryptographically secure random generator, and the passphrase is never sent or stored anywhere.
From a list of roughly 7,776 words, each word adds about 12.9 bits of entropy. Five words give about 64 bits, six give about 77 — well past what brute force can reach.
Spaces or hyphens between words help readability, and a number or symbol satisfies picky sites, but the word count is what carries the strength. Don't shorten the phrase to add complexity.
Yes — a long random passphrase is an excellent master password for a manager or disk encryption, since it's memorable yet has enough entropy to resist offline attacks.
Use fewer but still random words, or switch to a random character password for that site. Never cut to three words just to fit a low cap.
Use them as given. Swapping in words you find more memorable reintroduces personal bias and predictability, which lowers the entropy the random draw gave you.
Single-word or themed phrases are, but a passphrase of several independently random words has so many combinations that running a word-list attack is computationally hopeless.
Once, then save it in a password manager and rely on autofill. Choosing all-lowercase words with simple separators also makes the rare manual entry quicker.
Want to hide your IP for real?
vpn.golf is a no-logs WireGuard VPN. Pick a hole, take the shot.
Step up to the tee — free