are these passphrases safe?

they are built with your browser's cryptographically secure random generator (crypto.getRandomValues) on your own machine. the words never leave this page. security comes from length and randomness, not secrecy of the method.

how many words do i need?

every word adds roughly 8 bits of entropy. six words plus a number gives around 55 bits - solid for everyday use. use eight or more words for anything high-stakes like pgp keys or wallets.

home / tools / passphrase generator

passphrase generator

four random words are easier to remember and harder to crack than "P@ssw0rd42". generated locally with your browser's crypto-grade randomness - hit regenerate until you like one, then copy it. nothing is stored or sent.

two ways this runs: with javascript everything happens in your browser - nothing leaves your device. with javascript off, the button generates the passphrase once on our server with php's cryptographically secure random - done in memory, shown once, never stored or logged.

javascript is off - pressing "new one" will generate a passphrase on our server instead, using the server's cryptographically secure random. it is built in memory for that one request and never stored or logged.

tune it

words

separator

capitalize each word append a random 2-digit number

your passphrase

where should this run?

local · in your browser most private - nothing leaves your device. needs javascript. server · on our machine works without javascript. processed in memory during this one request - never stored or logged.

javascript is off: the local option is unavailable - your request runs on our server instead. it is processed in memory during this one request and never stored or logged.

strength -

entropy -

this is shown once. there is no "recover my passphrase" here. save it in a password manager or write it down before you navigate away.

use it for: a new pgp key › verifying downloads ›

faq

is the randomness real?: yes - crypto.getRandomValues(), the browser's cryptographic random source seeded by the operating system. not Math.random().
why words instead of characters?: length is what defeats cracking, and humans can actually remember five words but not 40 random characters. word-based passphrases give you both.
can you generate the same phrase twice?: practically impossible. every word carries about 8 bits of randomness, so a 5-word phrase plus the number suffix has ~47 bits behind it - two identical phrases will essentially never happen by chance.
should i use this offline?: you can. load the page once, disconnect, regenerate as often as you want - the code runs entirely locally.