Passphrase Generator
Strong but memorable passphrases — the NCSC “three random words” approach, scaled up. Generated in your browser, never sent or stored.
Each word is one of 2048 (11 bits). Four words ≈ 44 bits and are easy to remember; five or six are stronger. Test one → or random passwords →
More words, more strength
Passphrase Generator — FAQs
A passphrase is several random words strung together — the UK NCSC "three random words" idea. Because each word is chosen at random, a passphrase packs a lot of entropy while staying far easier to type and remember than a random string of symbols. It is ideal for the handful of passwords you must remember (your device login, your password-manager master password).
Yes, when the words are truly random. Each word here is chosen from a 2,048-word list, adding exactly 11 bits of entropy. Four words give ~44 bits, five ~55, six ~66 — five or more words resists offline cracking. The key is randomness: a phrase you made up yourself (a song lyric, a saying) is weak because it is predictable. This tool uses a cryptographically secure random generator.
Four words is a good memorable minimum for everyday accounts; use five or six for high-value accounts or your password-manager master password. Adding a separator and a number can satisfy sites that demand digits without weakening the phrase. Length still helps, so longer is stronger.
Both can be strong; it depends on use. Random character passwords pack the most entropy per character and are perfect for credentials stored in a password manager (you never type them). Passphrases win when a human has to type or remember it. For bulk machine accounts use the random password generator; for memorable logins use a passphrase. Test any of them in the strength checker.
Build the rest of your security
Test passwords, generate them in bulk, hash text and more — all free, all in-browser.