ES EN

PasswordSecure.org

Secure Passphrase Generator

Generate memorable passphrases from randomly chosen words.

{{ opt.label }} {{ opt.desc }}

{{ strengthLabel }}

{{ entropy }} bits
{{ error }}
{{ phraseMath }}

{{ phraseStrengthLabel }}

{{ phraseEntropy }} bits
{{ pwd }}

{{ t.historyTitle }}

{{ t.historyWarning }}

{{ t.noHistory }}

{{ item.pwd }} {{ item.date }}

{{ auditLabel }}

{{ calculateAudit.entropy }} bits

{{ t.timeToCrack }}: {{ crackTime }}

{{ pwnedCount > 0 && pwnedChecked ? t.pwnedOverride : t.crackAssumption }}

  • {{ auditFeedback.warning }}
  • {{ s }}

{{ t.pwnedErrTitle }}

{{ t.pwnedErrDesc }}

{{ t.pwnedYesTitle }}

{{ t.pwnedYesDesc.replace('{n}', pwnedCount.toLocaleString(lang)) }}

{{ t.pwnedNoTitle }}

{{ t.pwnedNoDesc }}

{{ t.checking }}

Frequently asked questions about passphrases

What is a Passphrase?

A passphrase is a sequence of randomly generated common words (for example: "horse-battery-staple-correct"). Unlike traditional passwords, they are much longer and more secure, yet extremely easy for a human to remember.

Why do experts recommend using Passphrases?

Because they are the only practical way to have a long password you can actually memorise. A random 16-character password is stronger than a 6-word phrase, but almost nobody remembers it: it ends up written down or reused. A passphrase lets you reach high security while keeping it in your head, as long as you use enough words.

How does this phrase generator work?

We use your browser's cryptographically secure generator (crypto.getRandomValues) with rejection sampling, so every one of the 7,772 words is exactly as likely to come up as any other. The English dictionary is the EFF large wordlist (CC BY 3.0 US); the Spanish one we built from dictionary words ranked by real-world usage, without accents so you can type the phrase on any keyboard. Everything happens on your device: phrases are never sent to a server.

How many words should I use?

Each word contributes log2(N) bits, where N is the dictionary size. Ours holds 7,772 words, so each one adds 12.92 bits. That gives you: 4 words = 51 bits, 5 = 64, 6 = 77 bits (our default, and the classic Diceware recommendation) and 8 = 103. For critical accounts such as your main email or password manager, use 7 or 8. We always show the maths under the indicator, so you never have to take our word for it.

Why is your bit counter lower than on other sites?

Because we calculate entropy honestly. Many tools treat the phrase as a random character string and multiply its length by log2(58), which inflates the result roughly fourfold. A word-generated phrase only has the randomness of the word choice: number of words × log2(dictionary size). The separator and capitalisation are settings an attacker already knows, so they add no bits.
Want to know how long it would take a hacker to crack your phrase? Use our Password Auditor.

Terms of use: By using PasswordSecure.org, you agree to our terms of use. Our service is provided "as is" without warranties. Please ensure you use the tool responsibly and protect the passwords you generate.