Build a passphrase out of random real words. Longer than a typical password, far easier to remember, and generated entirely in your browser — nothing is sent anywhere.
Join the words with hyphens to make your passphrase. Nothing is sent to a server and nothing is stored — the words are generated in your browser and disappear when you close the page.
Why words instead of random characters
A password like Tr0ub4dor&3 is hard for a person to remember and not especially hard for a computer to attack. A passphrase like
copper-lantern-fossil-drift is longer, which is what actually matters, and you can hold it in your head after reading it twice.
Length beats complexity. Four random words from a 6,000-word list gives you an enormous number of possible combinations, and each extra word multiplies that again.
How to use the output
- Generate four or five words.
- Join them with hyphens, dots or spaces — whatever the site accepts.
- If the site demands a number or symbol, put one between two words rather than at the end. Attackers assume it is at the end.
- Do not reuse it on another site.
Be honest about what this is. This tool uses your browser’s ordinary random number generator, which is fine for a forum login or a Wi-Fi password. For your bank, your email or anything protecting money, use a proper password manager — it generates from a cryptographically secure source and remembers the result for you, which is the part people actually get wrong.
Related
5 letter word generatorFixed-length words if you want an even passphrase.
Questions
Is a passphrase really safer than a password?
A passphrase of four or five random words is both easier to remember and harder to guess than a short password with symbol substitutions. Length is what makes a secret hard to crack, and real words let you get length without writing it on a sticky note.
Are the words really random?
They are picked using your browser’s random number generator from a 6,000-word list. For most accounts that is fine. For something that protects money or identity, use a dedicated password manager’s generator, which uses a cryptographically secure source.
Does this send my passphrase anywhere?
No. There is no server call. The words are generated in your browser and are gone when you close the tab. You can disconnect from the internet after the page loads and it will still work.
How many words should I use?
Four is a reasonable minimum. Five is better for anything important. Add a number or a symbol between two of the words if a site demands one.