Passphrase generator
Random words, easy to remember and type, hard to guess. Picked from the EFF long word list on your device.
Generator
Made on this device with your browser's secure random generator. Never saved, never sent, no history.
Options
Site rules PRO
Make a list PRO
Password strength checker
Checked as you type, on this device. It isn't saved and is cleared when you leave.
Has this password leaked?
Tap Check to look it up in Have I Been Pwned's list of hundreds of millions of leaked passwords. Only the first 5 characters of its SHA-1 hash are sent, never the password.
Five rules for strong passwords
- Length beats tricks.Four or more random words, or 16+ random characters. Swapping a for @ adds almost nothing.
- One password per site.Reuse is how one leak opens every account.
- Let a password manager remember them.Your phone or browser has one built in.
- Turn on two-step sign-in.Use a passkey or an authenticator app where you can.
- Skip names, dates and patterns.Birthdays, pets, teams and qwerty are tried first.
Settings
What it does
A passphrase is a few random words in a row, like a modern Diceware. Each word is picked at random from the Electronic Frontier Foundation's list of 7,776 words, so every word adds about 12.9 bits. Five words give about 64 bits and six about 77.
The words have to be chosen at random, not by you: a phrase you think of yourself, like a song lyric, is far easier to guess. Add a capital and a number if a site insists on them.
How to use it
- Pick how many words: five or six suit most accounts.
- Choose what goes between the words, and whether to capitalise them and add a number.
- Tap Copy, or the arrows for a new phrase.
Passwords are made on this device and are never saved, sent or kept in a history. Only your settings are remembered.
Good for
- A master password for your password manager
- Your computer or phone login
- Accounts you have to type on a TV or games console
- Anything you need to remember without writing down
Questions
How many words should a passphrase have?
Five or six random words. Five give about 64 bits of entropy and six about 77, which is plenty for a password manager or device login.
Is a passphrase better than a random password?
Not stronger letter for letter, but much easier to remember and type for the same strength. Use one where you have to type or remember it, and random passwords everywhere else.
More generators and checks
Open the full Password Generator · Guide: How to create a strong password