Passphrase Generator – Strong Memorable Phrases

A passphrase generator creates a memorable secret from several random dictionary words instead of a short jumble of characters. The classic example from XKCD 936 is correct horse battery staple: four ordinary words that are easier to remember than a 16-character password and much harder for an attacker to guess when the words are chosen at random.

This online passphrase generator is a Diceware passphrase generator. It uses the EFF long wordlist and picks each word with crypto.getRandomValues(), which is cryptographically secure randomness in the browser. After the page loads, it can be used as an offline passphrase generator: nothing you generate is transmitted.

1. Choose a word count. Five or six words is a strong default.
2. Pick a word separator such as a space or hyphen.
3. Set capitalisation if a site requires mixed case.
4. Optionally add a number, as many password managers do.
5. Click Generate passphrase and copy the result.
6. Store it in a password manager, or memorise a master password.

Diceware originally used physical dice to pick words from a list of 7,776 entries. The EFF long wordlist keeps that size and prefers words that are easier to type and remember. Each word therefore contributes about 12.9 bits of entropy (log₂ 7776).

A 6-word phrase is about 77.5 bits. A 12 word passphrase generator reaches about 155 bits, which is far beyond practical brute-force resistance for online logins. A 3 word passphrase generator is convenient but should not be your encryption passphrase or master password.

Word count    Approx. entropy
3 words       ~38.8 bits
5 words       ~64.6 bits
6 words       ~77.5 bits
12 words      ~155.1 bits

The passphrase generator XKCD comic (936) compared a “tricky” password such as Tr0ub4dor&3 with four random common words. People overestimate how much substitution helps against a dictionary attack and underestimate how much independent words help against brute force.

A 16 character passphrase generator that only mixes letters still has a smaller search space than six Diceware words. Character count is shown above so you can see that a memorable phrase is often longer than 16 characters — and that extra length is the point.

The Bitwarden passphrase generator popularised the same idea inside a password manager: several words, a separator, optional capitalisation, and sometimes a digit. Use this page the same way for a memorable passphrase generator when you need a master password or an encryption passphrase generator for a disk image or archive.

Prefer a password manager for site logins so you are not reusing one phrase everywhere. Save the strongest phrase you generate here as the manager’s master password, then let the manager create unique secrets for each account.

The best passphrase generator for privacy is one that never sees your result. This tool selects words locally with cryptographically secure randomness. The phrase is not sent to LiveTechHacks, is not stored on a server, and is not included in analytics events.

If a site blocks spaces, switch the separator to a hyphen. If it demands a digit, enable “Add a number.” Strength still comes from the word count, not from a single extra symbol.

What is a passphrase generator?

A passphrase generator builds a login secret from several ordinary words instead of a short string of random characters. This online passphrase generator uses the EFF long wordlist and cryptographically secure randomness in your browser.

Is this a Diceware passphrase generator?

Yes. It uses the EFF long wordlist, which is a modern Diceware list of 7,776 English words. Each word adds about 12.9 bits of entropy when chosen uniformly.

How is this different from the Bitwarden passphrase generator?

Bitwarden’s passphrase generator also assembles memorable words with a separator and optional capitalisation or a number. This tool does the same kind of job locally: you pick the word count and separator, and the phrase never leaves your browser.

Is a 3 word passphrase generator strong enough?

Three Diceware words are easier to remember but give far less brute-force resistance than five or six. A 3 word passphrase generator is useful for low-risk tests, not as a password-manager master password.

How does a 12 word passphrase generator compare to 16 characters?

A 16 character passphrase generator that only randomises letters still has a smaller search space than a 12 word passphrase from the EFF list. Word count usually beats a short character limit for both strength and memorability.

Does this encryption passphrase generator send my phrase anywhere?

No. Words are selected with crypto.getRandomValues() in your browser. Nothing is uploaded, stored, or transmitted. You can use it as an offline passphrase generator after the page has loaded.