Passphrase Generator
Create strong, memorable passphrases from random words, with a strength meter.
Generated in your browser with a cryptographically secure random number generator. Nothing is sent to our server or stored.
Continue your work
- Password Generator — Generate random character passwords.
- Hash Generator — Create hashes for developers.
Rate this tool
0.0
0 ratings
- 5 stars 0
- 4 stars 0
- 3 stars 0
- 2 stars 0
- 1 star 0
Share this tool
Found it useful? Send it to a friend or teammate.
Report an issue
Something broken or not quite right? Tell us and we will look into it.
Clear instructions
Find steps, examples and limitations below.
Use online
Open the tool in a supported web browser.
Free to use
No sign-up required. Tool-specific limits may apply.
How to use the Passphrase Generator
A passphrase is a password made of several random words, like Linen-Quartz-Core-Shade-Hound. It is much easier to remember and type than a jumble of symbols, yet very hard to guess when the words are chosen at random. This generator picks words with your browser's cryptographically secure random number generator and shows the strength in bits of entropy.
- 1 Choose how many words to use; five or more is strong for most accounts.
- 2 Pick a separator and whether to capitalize words or add a number and a symbol.
- 3 Copy your passphrase, or generate a list to choose from.
Example and practical tips
A five-word passphrase from a 1,000-word list has about 50 bits of entropy. At 10 billion guesses a second, it would take on average years to crack, and every extra word multiplies that by about 1,000.
Frequently asked questions
Are passphrases better than passwords?
A long random passphrase is as strong as a complex password but much easier to remember and type, which is why many security experts recommend them.
How many words should I use?
Five or six random words suit most accounts. Use seven or more for very sensitive accounts like a password manager's master password.
Is my passphrase stored?
No. It is generated in your browser and never sent to our server.