Passphrase generator
Strong passwords you can actually remember: random words from the EFF diceware list, picked by your browser's secure random number generator.
Loading word list…
Words drawn with crypto.getRandomValues from the bundled EFF Large Wordlist (7,776 words). Nothing leaves your device. Capitals add no entropy because they're applied to every word; the random digit adds about 6.1 bits.
Roll for a word
This is the original diceware method: five dice, read left to right, pick one of 65 = 7,776 words. Roll and watch the index land.
Code 66666 → word #7,776 → …
Each die has 6 faces, so five dice have 6 × 6 × 6 × 6 × 6 = 7,776 outcomes: exactly one per word, all equally likely. That's log2(7776) ≈ 12.9 bits per word. The dice here use the same secure randomness as the generator above; physical dice work just as well.
How many words?
| Words | Entropy | Slow hash (10k/s) | Fast hash (100 bn/s) |
|---|---|---|---|
| 3 | 38.8 bits | 1.5 years | 4.7 seconds |
| 4 | 51.7 bits | 12 thousand years | 10 hours |
| 5 | 64.6 bits | 90 million years | 9 years |
| 6 | 77.5 bits | 701 billion years | 70 thousand years |
| 7 | 90.5 bits | about 10¹⁵ years | 545 million years |
| 8 | 103.4 bits | about 10¹⁹ years | about 10¹² years |
Worst-case times for an attacker who knows you used this list and this word count. Five words suit everyday accounts; use six or more for a password manager master password.
Passphrase FAQ
What is a diceware passphrase?
Diceware is a method published by Arnold Reinhold in 1995: roll five six-sided dice, read the numbers as a five-digit code, and look the code up in a list of 7,776 words. Repeat for each word. Because the dice choose, the words are genuinely random, which is what makes the passphrase strong.
Which word list does this generator use?
The EFF Large Wordlist for passphrases, published by the Electronic Frontier Foundation in 2016. It has 7,776 words chosen to be memorable, easy to spell and free of offensive terms. Each word contributes log2(7776) ≈ 12.9 bits of entropy.
How many words should my passphrase have?
Five words (about 64.6 bits) is strong for most accounts protected by rate limiting and good hashing. Six words (77.5 bits) or seven (90.5 bits) are sensible for a password manager master password or disk encryption, which may face offline attacks.
Is it safe that the word list is public?
Yes. The strength calculation already assumes the attacker has the exact list and knows you used it. What they don’t know is which words the random number generator picked, and there are 7,776 choices for every position.
Does adding a number or capital letter help?
A little: we show the extra bits when you turn those options on. Adding one more word helps more and is easier to remember. Many sites that demand a digit or capital will accept a passphrase once you enable those options.
Are generated passphrases stored or sent?
No. Words are picked in your browser using crypto.getRandomValues from a list bundled with the page. Nothing is transmitted or saved.