SecuredKit

Passphrase Generator

This passphrase generator picks random words from the EFF large wordlist, so you get something like correct-horse-battery-staple that is easy to type and hard to guess. It shows the exact entropy in bits, and it runs entirely in your browser: nothing is sent to a server.

Loading the EFF wordlist…

Entropy77.5 bits6 × log₂(7,776) = 77.5

Strong enough for a password-manager master password, Wi-Fi or disk encryption.

🔒 Zero-Knowledge: generated in your browser with crypto.getRandomValues(). Nothing is transmitted.

Options

Number of words
Separator

Words come from the EFF large wordlist: 7,776 words, 12.9 bits of entropy each. Capital letters and the separator don't add entropy; they only help sites with strict rules accept the passphrase.

Bulk generate

Choose how many you need and press Generate list. The list uses the options above.

Why use a random passphrase

A passphrase is only as strong as the way its words were chosen. Words you pick yourself follow patterns that cracking tools already know, like song lines or your pet's name. This passphrase generator picks every word from the 7,776-word EFF list with crypto.getRandomValues() and rejection sampling, so each word is an equal, independent draw. That makes the strength easy to calculate: H = L × log2(R), where H is the entropy in bits, L is the number of words and R is the size of the list (7,776). Six words give 6 × 12.925 = 77.5 bits. You get that in a phrase you can actually type on a phone.

  • EFF large wordlist: 7,776 common English words, 3 to 9 letters long, with confusing and offensive words removed, so the phrase you get is easy to read out, remember and type.

  • Exact entropy in bits: the number changes as you add words or the 0–99 number, and the formula is shown next to it, so you can see why 6 words is the usual minimum for a master password.

  • Zero-Knowledge: the Passphrase Generator processes everything in your browser's volatile memory. Nothing is transmitted, logged or stored, and you can check it in your browser's Network tab.

  • Options for picky sites: a hyphen, space, dot, underscore or no separator, capital letters, and a number at the end, for login forms that insist on an uppercase letter and a digit.

  • Bulk generation: make up to 500 passphrases at once and download them as TXT or CSV with the entropy column, handy when you set up Wi-Fi for several offices or hand out first-login passwords.

How to make a passphrase

  1. 1

    Choose the number of words: 6 for a master password or encryption, 4 or 5 for an ordinary website account.

  2. 2

    Pick a separator and, if a site asks for them, turn on capital letters and the number.

  3. 3

    Press New passphrase until you get one you like, then press Copy.

  4. 4

    Save it in your password manager or write it down, and keep the paper somewhere safe at home.

Passphrase generator FAQ

Also try the Password Strength Checker to see how long a password you made up yourself would survive a real attack.

Guides on this topic

Made your passphrase? Check your other passwords against real attacks next.