About the Passphrase Generator
A passphrase made of several random words, the "correct horse battery staple" idea, is both strong and memorable, which is why security guidance increasingly recommends it. This generator picks words at random from a curated list using the browser's secure random source, joins them with your chosen separator, and can capitalise them or append a number to satisfy sites with rigid rules.
Strength comes from the number of words, not from cramming in symbols: four random words already give a large keyspace, and five or six are strong enough for a master password. The status shows the approximate entropy. Because each word is chosen independently and randomly, the phrase is not guessable even though it is readable.
Everything runs in your browser and nothing is stored. For a random character password instead, use the Password Generator.
How to use
- Choose the number of words and a separator.
- Optionally capitalise words or append a number for strict sites.
- Copy a passphrase.
Common questions
- Is a passphrase as strong as a random password?
- A four to six word passphrase from a large word list has plenty of entropy and is far easier to remember and type.
- How many words should I use?
- Four for most accounts, five or six for a master password or password-manager vault.
- Are the words chosen securely?
- Yes, with the browser's cryptographic random source, so the choice is unpredictable.