Your passphrase
Why passphrases are easier to use and safer
A random string like T7$k9@Qx is hard to remember, so people make it short — which makes it weak. A passphrase of four or five randomly chosen words, like maple-coyote-ember-harbor, is long enough to resist brute force while being far easier to memorize and type.
How entropy is computed here
This generator picks words from a built-in list and uses the Web Crypto API (crypto.getRandomValues) for true randomness — not the predictable Math.random. The entropy shown is the number of words multiplied by the base-2 logarithm of the word list size, plus a small amount if you add a number. The more words you choose, the more entropy — and the longer an attacker would need to crack it.
A note on word lists
A larger word list gives more entropy per word. The list used here is intentionally modest for simplicity; dedicated password managers use much larger lists (thousands of words) for even higher entropy per word. For your most important accounts, a password manager's generated passphrase is the best choice.
Explore more tools
- Password strength checker — see how strong any password is.
- Entropy → crack time — see how entropy maps to time to crack.
- Password security tips — practical guidance for staying safe.