Local privacy-first tool
Random Passphrase Generator
Generate 4 to 10 independently selected words with a documented word list and no network request.
Private by design: values stay inside the isolated tool origin and are not sent to this page, analytics, advertising, storage, or server logs.
What is a passphrase?
A passphrase is a sequence of words used as a credential. The security of this tool comes from independent random word selection, not from ordinary sentence length. A phrase you invent from a quotation, lyric, slogan or personal story has structure that an attacker can prioritize.
The tool self-hosts the EFF long word list with 7,776 entries. Each word is selected with browser cryptographic randomness. The base theoretical entropy is word count × log2(7,776), approximately 12.9 bits per word.
When is a passphrase better than a random password?
A passphrase is useful when you must type or remember the credential, especially for a password-manager vault or device that accepts sufficient length. A fully random character password is more compact and is usually better for ordinary accounts that a password manager can fill automatically.
Check the target service maximum length and accepted separators before depending on a new phrase. Some older systems truncate long input or reject spaces.
Generated passphrase versus a phrase you invent
Independent word selection creates a measurable choice space. Human selection does not. People favor familiar word combinations, grammar, themes, quotations and personal facts. Capitalizing the first word or appending the same year does little if the underlying phrase is predictable.
Do not edit a generated passphrase into a meaningful sentence and keep the displayed estimate. Generate a new one if the result is hard to use.
Word count, separators and additions
Each extra independently selected word multiplies the word space by 7,776. A separator mainly improves readability and compatibility; a fixed hyphen adds no uncertainty. An optional digit or symbol adds only the number of choices actually selected by the tool. Deterministic capitalization is formatting, not random entropy.
Six random words provide a much larger theoretical space than four, but the account and storage context still matter. Use the entropy calculator to compare explicit assumptions.
Master passphrase and recovery considerations
A vault master credential should be unique, never shared, and practiced enough to avoid lockout. Keep the manager recovery key or emergency kit in a separate protected place. Enable MFA that does not depend solely on the same unlocked vault when the provider supports it.
No generator can recover a forgotten phrase. Confirm the vault unlock works on a second authorized device before deleting an old credential or recovery method.
Limits of passphrases
A passphrase does not protect against phishing, malware, screen capture, unsafe clipboard tools or a weak recovery process. Word lists are public by design; security comes from random selection across the list. Never use the displayed entropy for a self-written phrase.
Source: EFF Dice-Generated Passphrases.