// eff wordlist · 12.92 bits per word · nothing transmitted

passphrase generator_

Random words from the EFF long wordlist, chosen with a cryptographic RNG. Every word is worth exactly 12.92 bits, so the entropy shown is a fact, not a guess.

password

—

Time to crack — by who is attacking, and how the site stored it

You don't get to choose which column applies — the site does, when it decides how to store your password. Assume the worst one. Rates are stated so you can check the arithmetic rather than trust it.

Length 20

Characters

lowercasea–z uppercaseA–Z digits0–9 symbols!@#$%^&*()-_=+[]{};:,.<>?/~

Rules the site forced on you

at least one of each type Only tick this if a site demands it. It removes possibilities, so it very slightly lowers entropy — the figure above already accounts for that. no lookalike characters Drops Il1|O0oB8S5Z2G6q9g. Useful when it will be read aloud, typed from paper, or set on a TV. shell & CSV safe Drops quotes, backticks, $, \ and friends, so it survives a script, a YAML file or a connection string.

NIST SP 800-63B-4 forbids sites from imposing composition rules — the guidance now says verifiers shall not require a mixture of character types. Plenty of sites never got the memo, so the switches are here; they just aren't the point.

Words 6

Separator

Extras

Capitalise Each Word Adds nothing an attacker doesn't expect, but some sites insist on a capital. add a digit For sites that demand a number. Worth about 5 bits — a seventh word would be worth 13. add a symbol Same story: satisfies a rule rather than an attacker.

▸ Words are drawn from the EFF long wordlist — exactly 7,776 words, so every word is worth precisely 12.92 bits no matter which one comes up. That is what makes the entropy figure above a fact rather than a guess. Six words beats a twelve-character random password, and you can actually remember it.

Digits 6

⚠ A PIN is for a device that locks after a handful of wrong tries — a phone, a SIM, a door. Read the rate-limited column and ignore the rest: a 6-digit PIN is a million options, which is fine behind a lockout and hopeless anywhere else. Never use a PIN as a website password.

Format

Bytes 32

uppercase hexA–F instead of a–f. Same entropy.

▸ Tokens are drawn straight from crypto.getRandomValues() with no modulo bias. A 128-bit token (16 bytes, 32 hex characters) can't be guessed; 256 bits is the usual choice for session secrets and signing keys.

How many 10

Uses the settings from the password tab. Each one is generated independently.

⚠ A downloaded file is a plaintext list of passwords sitting in your Downloads folder. Move them into a password manager and delete the file — don't leave it there, and don't email it.

Type or paste a password to analyse

This runs in the page. There is no server to send it to — open your network tab and watch, or turn off your Wi-Fi and try it. It is still not a good idea to paste a password you use into any website, including this one.

▸ Nothing here is transmitted. Generation, analysis and the breach check all run in this page using crypto.getRandomValues() and a word list that ships with it. There is no backend, no logging and no analytics event that carries what you generate. The page loads an anonymous, cookie-free page-view counter and nothing else.

Guide — how to use the passphrase generator

Generated in your browser with crypto.getRandomValues(); nothing is sent anywhere.

1Choose the word count

Six words (about 77 bits) is the usual choice for a master password. Five is the minimum for anything that matters.

2Pick a separator

Hyphens, dots or spaces. The separator adds nothing to strength, so choose whatever you can type easily.

3Add a digit or capital only if a site insists

They satisfy rules, not attackers. A seventh word is worth far more than a digit.

4Memorise it, or store it

Make up a short story that links the words. Or save it in a password manager.

Questions and answers

How many words should a passphrase have?

Six words from a 7,776-word list gives about 77 bits of entropy. That is out of reach of realistic offline attacks against fast hashes. Four words (about 52 bits) is the floor; five is reasonable for most accounts.

Is a passphrase better than a random password?

For something you must type or remember, yes: six random words is stronger than a twelve-character random password and far easier to remember. For a password manager entry, a long random password is just as good.

Where do the words come from?

From the EFF long wordlist, which has exactly 7,776 words (the same size as five dice rolls). Because every word is equally likely, each adds exactly 12.92 bits.

Is anything sent to a server?

No. The words ship with the page and are picked with crypto.getRandomValues() in your browser. There is no backend that could log them.

Should I change words if I do not like the result?

No. Choosing words you like removes randomness. If you do not like it, generate a new one from scratch.

Want the full story on entropy, crack times and what NIST SP 800-63B says? See the complete random password generator, which also includes a password checker and bulk export.

Related tools

UUID Generator

Random version 4 UUIDs, one click, copy.

API Key & Token Generator

Hex, base64url and prefixed API keys from a CSPRNG.

PIN Generator

Random 4 to 16 digit PINs.

WiFi Password Generator

Easy to type, hard to guess.

WiFi QR Code Generator

Turn a network password into a QR code guests can scan.

Fake Data Generator

Realistic test data for development, entirely offline.

Message Header Analyser

Read email headers and spot spoofing without uploading them.

All tools

The rest of the free browser tools on this site.