UK’s trusted IT infrastructure partner since 2003
Servnet
ToolsConfiguratorGet in Touch
Free Tool · Cyber Security

Passphrase Generator

Strong but memorable passphrases — the NCSC “three random words” approach, scaled up. Generated in your browser, never sent or stored.

Generated in your browser with a cryptographically secure RNG. Nothing is sent, logged or stored — works offline.
Strength: Fair · 44 bits of entropy

Each word is one of 2048 (11 bits). Four words ≈ 44 bits and are easy to remember; five or six are stronger. Test one → or random passwords →

More words, more strength

Passphrase strength — 11 bits per random word~60 bits: resists offline attack33 bits3 words44 bits4 words55 bits5 words66 bits6 words77 bits7 wordsFour+ random words are easy to remember and strong — the NCSC "three random words" idea, scaled up.
Everything stays in your browser🔒 Your browserinput · generate · check · hashno third-party scripts · works offlinenothing sentServernever sees it

Passphrase Generator — FAQs

What is a passphrase and why use one?

A passphrase is several random words strung together — the UK NCSC "three random words" idea. Because each word is chosen at random, a passphrase packs a lot of entropy while staying far easier to type and remember than a random string of symbols. It is ideal for the handful of passwords you must remember (your device login, your password-manager master password).

Are passphrases actually secure?

Yes, when the words are truly random. Each word here is chosen from a 2,048-word list, adding exactly 11 bits of entropy. Four words give ~44 bits, five ~55, six ~66 — five or more words resists offline cracking. The key is randomness: a phrase you made up yourself (a song lyric, a saying) is weak because it is predictable. This tool uses a cryptographically secure random generator.

How many words should I use?

Four words is a good memorable minimum for everyday accounts; use five or six for high-value accounts or your password-manager master password. Adding a separator and a number can satisfy sites that demand digits without weakening the phrase. Length still helps, so longer is stronger.

Passphrase or random password — which is better?

Both can be strong; it depends on use. Random character passwords pack the most entropy per character and are perfect for credentials stored in a password manager (you never type them). Passphrases win when a human has to type or remember it. For bulk machine accounts use the random password generator; for memorable logins use a passphrase. Test any of them in the strength checker.

Build the rest of your security

Test passwords, generate them in bulk, hash text and more — all free, all in-browser.

All Security Tools →Cyber Security