What this tool does
The Passphrase Generator builds passwords from randomly chosen dictionary words - the correct-horse-battery-staple approach. Word-based passphrases are both stronger and easier to remember than short jumbles of symbols, because their strength comes from genuine randomness, not from looking complicated.
How the randomness works
Words are drawn from the EFF Short Wordlist (1,296 words chosen for memorability and distinctness; CC-BY, eff.org/dice) using your browser's cryptographically secure random generator. Each word contributes about 10.3 bits of entropy: 4 words is about 41 bits, 5 words about 52, the default 6 words about 62, and 8 words about 83. In practical terms: against a service that hashes passwords properly (limiting attackers to roughly a million guesses per second), cracking a 6-word passphrase takes on average about 74,000 years. Against a worst-case offline attacker making a trillion guesses per second, 6 words holds for about a month on average, while 8 words holds for over 100,000 years - so choose the length to match what it protects.
Unlike every other generator on this site, this one issues no fairness receipt, keeps no history, and offers no share link - a receipt would let anyone who saw it reproduce your passphrase. Generation happens entirely on your device; nothing is ever transmitted or stored. Copy your passphrase straight into your password manager.
Read more about fairness and receipts on RandomEveryth.ing.
When to use it
- Master passwords for password managers
- Wi-Fi network passwords guests can actually type
- Disk-encryption and backup passphrases you must remember
- Any account where you want strength without gibberish
Frequently asked questions
- Is it safe that the generator runs in a browser?
- Yes. The draw uses the same cryptographic randomness as key generation, happens only on your device, and leaves no trace on our side - we never see it, store it, or receipt it. For the cautious: you can load the page, disconnect from the internet, generate, and close the tab.
- Are real dictionary words not easier to crack?
- Not when they are randomly chosen. Six random words from a 1,296-word list is one of 4.7 quintillion equally likely possibilities - the attacker gains nothing from knowing the word list. What is weak is a phrase you made up yourself, because human choices are far from random.
- A site requires digits and symbols. Now what?
- Turn on capitalization and use the period separator, then append a digit if required. The words carry the real strength; the extras are just compliance.
- Why is there no receipt or history for this generator?
- Receipts make results reproducible - exactly what you want for a giveaway and exactly what you do not want for a secret. This generator deliberately leaves no trail anywhere.