Passphrase Generator
This passphrase generator uses a curated wordlist to create memorable multi-word passphrases.
Each word contributes approximately log₂(wordlist_length) bits of entropy based on the embedded list.
All passphrases are generated locally using
crypto.getRandomValues() —
the browser's cryptographically secure random generator. No server contact, no data stored.
| Property | Password (20 chars) | Passphrase (5 words) |
|---|---|---|
| Example | kP#9mL@nX2vQ$wR!jH6y | correct-horse-battery-staple-time |
| Entropy | ~131 bits (full charset) | ~64 bits (5 words × 12.9 bits) |
| Memorability | Very difficult | Easy — forms a mental image |
| Typing speed | Slow, error-prone | Fast, readable words |
| Dictionary attack | Not vulnerable | Resistant if ≥ 5 words |
| Recommended for | API keys, tokens | Master passwords, login |
Frequently Asked Questions
How are the words selected?
Words are chosen using crypto.getRandomValues() applied to a curated 561-word list. Each selection is cryptographically random.
How much entropy does a passphrase have?
A 5-word passphrase has approximately 45 bits of entropy. 6 words reaches 54 bits, and 7 words reaches 63 bits — comparable to a 10-character full-ASCII random password.
Can I use a passphrase as a master password?
Yes. Passphrases are ideal for master passwords. Use at least 6 words and never reuse a passphrase.
Is the passphrase ever transmitted anywhere?
No. All generation runs locally in your browser. Nothing is sent to any server.