Tools
Password and Passphrase Generator
Random words or random characters, generated in your browser with the Web Crypto API. Nothing you generate is sent to us or stored.
Output
Which Should I Use?
For anything you have to type or remember, use random words. The UK's National Cyber Security Centre recommends three random words as a memorable starting point. We default to five because the words here are picked by a computer from a public list, so the strength is exactly what the list size gives you: about 12.9 bits a word, and about 65 bits for five.
For anything a password manager or a machine stores for you, use long random characters.
How Strong Is It?
The figure shown assumes an attacker knows the list and your settings, and counts only the random choices. Under 50 bits is weak, 50 to 63 fair, 64 to 99 strong and 100 or more very strong. Capitalising every word adds nothing an attacker would not guess.
How It Works
- Every choice uses your browser's Web Crypto random number generator, with no bias towards any word or character.
- If your browser has no secure random source, the generator stops and says so rather than fall back to a weaker one.
- Nothing is sent to us or kept: refresh the page and it is gone.
The Word List
Passphrases use the EFF Large Wordlist for Passphrases (7,776 words) by the Electronic Frontier Foundation, used under the Creative Commons Attribution 3.0 licence. We dropped the dice numbers and changed nothing else.