Memorable Passphrase Generator (Diceware-style)
Generate a memorable, easy-to-read-aloud passphrase by randomly combining common words. Choose the word count, separator, capitalization, and a trailing number — everything runs entirely in your browser.
About the Diceware passphrase method
Diceware is a method for creating memorable passwords by using dice (or another random source) to pick several words from a word list and concatenating them. The result is far easier for humans to remember than a random string of letters and symbols, and its resistance to brute-force attacks (entropy) grows linearly as you add more words.
Tips
- We recommend at least 4 words. With 3 or fewer, the estimated entropy is often too low to resist dedicated cracking tools.
- For things you need to read aloud or write down, such as a Wi-Fi password, a hyphen separator is easier to read and reduces typing mistakes.
- If a service requires a symbol, enabling "Append a 2-digit number" can help satisfy complexity requirements without adding punctuation.
- The generated passphrase is only displayed, never saved. Reloading the page produces a new combination, so copy it immediately if you plan to use it.
FAQ
Side Note — How "correct horse battery staple" changed the conversation
Diceware itself was devised by Arnold Reinhold in 1995, but it became widely known thanks to the webcomic xkcd, whose 936th strip (2011) compared a complex-looking but hard-to-remember password like "Tr0ub4dor&3" with a passphrase made of four plain words, "correct horse battery staple." The comic showed that the latter is actually harder to brute-force despite being far easier to memorize.
This apparent paradox comes down to information-theoretic entropy. Rather than widening the character set per position, picking several words from a large list accumulates more bits of randomness per selection. Even a list of around 853 words yields roughly 9.7 bits per word, so four words together already rival an 8-character password mixing letters, digits, and symbols.
There are practical trade-offs, though. Longer passphrases are more prone to typos, and reusing the exact word list means an attacker who obtains it effectively shrinks the search space to that list. For your most sensitive accounts, treat a generated passphrase as a memorable master password for a password manager rather than reusing it everywhere.