Passphrase Generator (Offline Diceware)

Loading wordlist…

Strength—

Entropy: — bits

Words: 6

Number of words (4 to 8)

More words means exponentially harder to guess. Six words is the recommended minimum.

Separator

Why use a passphrase instead of a password?

Traditional passwords try to be strong by being complicated: short strings of mixed case, numbers and symbols. The problem is that short and complicated is both hard for you to remember and increasingly easy for computers to guess.

A passphrase flips the trade-off. A string of several random words, like correct horse battery staple, is far longer than a typical password, and length is what actually defeats modern guessing attacks. Six random words from a 7,776-word list carry about 77 bits of entropy, which is stronger than a typical 12-character random password and dramatically easier to type and remember.

How this generator works

Real diceware method. Words are drawn from the EFF Diceware Long Wordlist of 7,776 short, memorable English words, the same approach as rolling five physical dice.
Cryptographic randomness. Each word is picked with your browser's crypto.getRandomValues(), the same secure random source used by browsers for encryption keys. No Math.random(), no server, no patterns.
100% offline. The wordlist is embedded in this page. Once it loads, you can disconnect from the internet entirely and it keeps working. Your passphrase never leaves your device.

How much entropy do you get?

Each word from the 7,776-word list contributes about 12.9 bits of entropy. Total strength is simply words times 12.9:

Words	Entropy (bits)	Guidance
4	51.7	Okay for low-value accounts
5	64.6	Good for most accounts
6	77.5	Strong, recommended minimum for important logins
7	90.4	Excellent for password managers and crypto wallets
8	103.4	Maximum, for your most critical secrets

Frequently asked questions

What is a diceware passphrase?

Diceware is a method for creating passphrases invented by Arnold Reinhold in 1995. You roll five dice to get a number like 43146, then look up the matching word in a numbered list. Doing that six times gives you a six-word passphrase with 77.5 bits of entropy. This tool automates the rolling with cryptographic randomness instead of physical dice, using the EFF's 2016 wordlist.

Is this passphrase generator really offline and safe?

Yes. The entire 7,776-word list is embedded in this single page and every passphrase is generated by JavaScript running on your own device. There is no account, no tracking, no analytics, and no network request after the page loads. You can turn on airplane mode and it will keep working. For maximum paranoia, generate your passphrase in a private browsing window and close the tab when you are done.

Passphrase or password: which should I use?

For anything a human has to type or remember, a passphrase wins: it is longer, stronger, and easier to recall. For machine-only secrets like API keys, a long random string of characters is fine. The best setup is a password manager protected by one strong passphrase, with unique random passwords stored inside it for every site.

How should I store my passphrase?

Use a reputable password manager and make your passphrase the master secret that unlocks it. Never reuse the same passphrase on multiple important accounts, and do not email it to yourself or store it in a plain text file. If you write it down, keep the paper somewhere physically secure, like a locked drawer.

Should I add numbers or symbols to my passphrase?

Adding one more random word is almost always better than complicating the words you have. A seventh word adds 12.9 bits of entropy, while capitalizing a word or adding a digit adds only a few bits and makes the passphrase much harder to remember. The one exception: some websites require a digit or symbol. In that case, append a digit and use a dash separator, and you still get most of the benefit.