gizmobench
BrowseDaily

Passphrase Generator

Generate a passphrase of 4 random English words, initially separated by hyphens, from a bundled 2,048-word list. Each word contributes 11 bits of random-choice entropy, so 4 words contribute 44 bits before an optional random digit. Choose 2 to 12 words, change the separator or capitalise each word, and draw one phrase or up to 100. This is an ordinary passphrase generator; it does not implement Diceware lists or wallet recovery phrases.

ReadyYour passphrase appears here

Drawn in this tab the moment the page is ready

Type
Words
Style
Entropy
waiting
Strength
waiting
Word list
2,048 words
Word source.

Use Passphrase Generator for the four-word bundled preset, or Word Password Generator for a supplied list.

The length box takes any number from 4 to 128, so an 8, a 12 or a 16 character rule is one keystroke away. Turning a set off drops it from the pool and lowers the entropy shown; excluding look-alikes removes 6 characters (0 O 1 l I |) for a password you have to read off a screen and type somewhere else.

Made here, kept here. Every character is drawn from crypto.getRandomValues on your own device by rejection sampling, so no position in the alphabet is favoured. The result is not sent anywhere, does not enter an analytics event and is never written into a link, and the only thing this page remembers between visits is your settings. A supplied word list stays in page memory and is never saved. It cannot know the rules a particular site enforces, so check its length limit and which symbols it accepts before you save one.
Accuracy. Passwords and passphrases come from the browser's own cryptographic randomness, made on your device and never sent anywhere. Entropy describes the random choices, not a cracking-time prediction. It cannot know a site's own password rules.

Common questions

How many words can I generate?
Choose 2 to 12 words per phrase. Word-choice entropy is 11 bits per word. Longer random phrases have a larger choice space, but this figure does not establish the security of the site or its password storage.
Is this Diceware, an EFF word list or a wallet recovery phrase generator?
This uses a bundled 2,048-word English list and the browser random generator. It does not roll physical dice, use the original Diceware or EFF lists, implement BIP39/checksum rules, or recover a cryptocurrency wallet. The supported word count is 2 to 12. Ordinary passphrases are separate from 12 or 24-word wallet recovery phrases.
Can I supply my own words, get one pronounceable word, or choose another language?
Switch to Passphrase and choose Your word list to draw from words you supply. Paste at least two distinct A–Z words, separated by spaces, commas or new lines. Case is normalized and duplicates are removed before choices are counted. Choose 2 to 12 words per phrase, a separator, capitalization and an optional random final digit. The list stays in page memory and is not saved. This does not mutate a single supplied name, synthesize a pronounceable single word, enforce a final character length or provide a translated dictionary.
Can I join the words without a separator?
Yes, an empty separator joins them. Use a non-letter separator or capitalise word boundaries when you need the choice-space figure to correspond to distinct word sequences in the final text. Lowercase words joined without boundaries can have ambiguous splits; the tool calls the figure choice entropy in that case.
Can I generate passwords in bulk or download a list?
Set Batch count from 1 to 100. Each password or passphrase is drawn independently using the settings on screen; repeats are possible. Copy batch puts one value per line on the clipboard, and Download TXT exports the same list with a final newline. Generated batches and the last five main values remain in this page only. A clipboard or downloaded file is a copy you choose to keep, so handle it like other credentials.
Are generated values saved or sent anywhere?
Generation runs in this browser. Generated values and supplied word lists are not uploaded, included in analytics events, put in links or saved to local storage. Valid settings you explicitly change are remembered when storage is available; opening a preset page does not overwrite unrelated remembered settings. History, batches and supplied lists disappear on reload. Copy and TXT downloads are deliberate exports you control.
How do I generate two, three, six, eight or twelve words?
The Words box accepts every whole count from 2 to 12. This page starts with four bundled words. Two, three, six, eight and twelve bundled words have 22, 33, 66, 88 and 132 bits of word-choice entropy respectively, before an optional random final digit. Words are drawn with replacement, so a phrase can repeat a word. Exact final character length is a separate job.
Can I use supplied words instead of the bundled list?
Choose Your word list, paste at least two distinct A–Z words and keep the desired count from 2 to 12. Case and duplicate entries are normalized. Words are drawn independently with replacement and the bits use the actual list size. The separate Word Password page starts on this supplied-list workflow; the list itself is never remembered.
Can I include special characters in a passphrase?
Use a separator such as - or ! between words, up to four characters with no spaces. The chosen separator is fixed, so it adds no random bits. Add a random digit appends a randomly drawn 0–9 value. This does not add a randomly selected symbol or enforce a receiving site’s particular rule.
What are the tradeoffs of a passphrase versus random characters?
Whole words can be easier to read and type, but their final character length varies. Character passwords instead enforce a chosen length and selected ASCII sets. This generator shows the choice space of the actual settings, including the word-list size and required character classes; it does not measure memory, guessing cost, reuse, breach status or account security.

Passwords and passphrases come from the browser's own cryptographic randomness, made on your device and never sent anywhere. Entropy describes the random choices, not a cracking-time prediction. It cannot know a site's own password rules.