What is a passphrase?

A passphrase is a sequence of random words used as a password — for example "correct-horse-battery-staple". Because words are longer than individual characters, passphrases achieve high entropy while remaining readable and easy to type.

How secure is a 4-word passphrase?

With the built-in 512-word list, a 4-word passphrase has 512^4 ≈ 68 billion combinations, yielding about 36 bits of entropy. A 5-word passphrase reaches 45 bits — comparable to a 10-character fully-random password, but far more memorable.

Is the generation truly random?

Yes. Word selection uses crypto.getRandomValues(), which is cryptographically secure. The randomness is equivalent to rolling dice in a Diceware ceremony.

Diceware is a method for generating passphrases by rolling physical dice and looking up words in a numbered list. This tool replaces the dice with crypto.getRandomValues() for the same randomness without the physical process.

Should I use a passphrase or a random password?

Use a passphrase for secrets you need to type or remember — like a master password for a password manager, a disk encryption key, or a Wi-Fi password you share with guests. Use a random password for everything else and store it in a manager.

Can I add numbers or symbols?

Yes. Enable "Append a number" to add a random digit after the last word, increasing entropy slightly. For symbols, consider adding one manually after generation if a site requires it.

Is the word list embedded in the page?

Yes. The 512 curated words are bundled with the page JavaScript. No server request is made when generating; the word list is never sent or logged.

Can I use my own word list?

Not directly in this tool. For custom word lists, use the Random String Generator with a custom character set, or open a GitHub issue to request the feature.

Generators /

Passphrase generator

Generate memorable Diceware-style passphrases from random words. Easier to type than random passwords, with comparable security when using 5+ words.

100% in your browser. Passphrases are never sent anywhere.

Word count: 4 3 – 8

tool.passphrase.label-separator

Capitalize first letter of each word Append a random number

Generated passphrase

How to use

Choose the word count using the slider. 4 words is a good default; 5–6 words for high-security uses.
Pick a separator between words. Hyphens and dots work well for most systems.
Optionally enable Capitalize to title-case each word, and Append a number for sites requiring a digit.
Click Generate passphrase.
Click Copy and paste it into your password manager or the sign-up form.

Common use cases

Master password — a 5-word passphrase is strong enough for Bitwarden, 1Password, or KeePass.
Full-disk encryption — memorable enough to type at boot, secure enough to protect the drive.
Wi-Fi password — easy to read aloud or write on a sign without ambiguity.
SSH key passphrase — type it a few times per session without mistakes.

Also see: Password Generator for short high-entropy strings, and Random String Generator for custom character sets.

常见问题

What is a passphrase?: A passphrase is a sequence of random words used as a password — for example "correct-horse-battery-staple". Because words are longer than individual characters, passphrases achieve high entropy while remaining readable and easy to type.
How secure is a 4-word passphrase?: With the built-in 512-word list, a 4-word passphrase has 512^4 ≈ 68 billion combinations, yielding about 36 bits of entropy. A 5-word passphrase reaches 45 bits — comparable to a 10-character fully-random password, but far more memorable.
Is the generation truly random?: Yes. Word selection uses crypto.getRandomValues(), which is cryptographically secure. The randomness is equivalent to rolling dice in a Diceware ceremony.
What is Diceware?: Diceware is a method for generating passphrases by rolling physical dice and looking up words in a numbered list. This tool replaces the dice with crypto.getRandomValues() for the same randomness without the physical process.
Should I use a passphrase or a random password?: Use a passphrase for secrets you need to type or remember — like a master password for a password manager, a disk encryption key, or a Wi-Fi password you share with guests. Use a random password for everything else and store it in a manager.
Can I add numbers or symbols?: Yes. Enable "Append a number" to add a random digit after the last word, increasing entropy slightly. For symbols, consider adding one manually after generation if a site requires it.
Is the word list embedded in the page?: Yes. The 512 curated words are bundled with the page JavaScript. No server request is made when generating; the word list is never sent or logged.
Can I use my own word list?: Not directly in this tool. For custom word lists, use the Random String Generator with a custom character set, or open a GitHub issue to request the feature.

反馈这个工具的问题