Random words like Maple-Orbit7-Kettle-Dune are easier to type than t#9Lq!vZ, and far harder to crack once there are enough of them. Every word is drawn by the Web Crypto API from a list of 1,829 common English words.
Calculating…
PINs are only safe where attempts are limited, like a phone or a bank card. Obvious ones (1234, 0000, 1212) are skipped.
Time to crack your new passphrase
Worst case: an offline attack on a fast hash by a GPU cluster testing one trillion guesses per second.
The numbers
Each random word adds 10.8 bits of entropy. Here is what that means against the worst case: a GPU cluster making a trillion guesses per second against a fast hash.
| Length | Entropy | GPU cluster needs | With a number | GPU cluster needs |
|---|---|---|---|---|
| 4 words | 43 bits | 6 seconds | 52 bits | 37 minutes |
| 5 words | 54 bits | 3 hours | 63 bits | 2 months |
| 6 words | 65 bits | 7 months | 74 bits | 356 years |
| 7 words | 76 bits | 1.1 thousand years | 85 bits | 759 thousand years |
| 8 words | 87 bits | 2 million years | 96 bits | 1.6 billion years |
| 9 words | 98 bits | 3.6 billion years | 107 bits | 3.3 trillion years |
Most real sites store passwords with slow hashes such as bcrypt or Argon2, which slow attackers down by a factor of millions. These figures are the floor, not the typical case.
Why it works
People pick predictable phrases: song lyrics, quotes, sports teams. Cracking tools ship with all of them. A passphrase is only strong when every word is picked at random from a large list, which is exactly what this generator does.
Six random words from our list give about 10.8 × 6 bits of entropy. Add a seventh word and an attacker's work grows by a factor of 1,829. No symbol substitution comes close to that.
Use passphrases where a password manager cannot fill in for you: the manager's master password, your computer login, a Wi-Fi key you read out to guests, or a disk encryption password.
Some sites cap passwords at 16 or 20 characters. There, a random password packs more strength per character. For everything stored in a manager, random characters are perfect.
Questions
A passphrase is a password made of several words, like Maple-Orbit7-Kettle-Dune. When the words are picked at random, it is as strong as a long random password but much easier to type and remember.
Use at least 6 random words for important accounts, and 7 or more for a password manager master password or a disk encryption key. Each extra word multiplies the number of guesses an attacker needs by about 1,829.
Not anymore. It became famous, so it is in every cracking dictionary. The idea behind it is still right: the words must be chosen at random by a machine, not by a person, and never copied from an example.
It helps a little, and some sites require it. The generator can add a random number at a random position. Adding more words gives you far more strength than swapping letters for symbols.
It follows the same principle as Diceware: each word is selected uniformly at random from a fixed list. Instead of dice, it uses your browser's cryptographic random number generator, with unbiased sampling.
No. The word list is downloaded once with the page, and every passphrase is assembled locally in your browser. Nothing is sent, stored or logged, and the tool works offline.
Random passwords, passphrases or PINs, created by the Web Crypto API on your device.
Open toolSee your password the way an attacker does: patterns, entropy and four crack-time scenarios.
Open toolFind out if a password already leaked, without ever revealing it (k-anonymity).
Open toolNIST, PCI DSS and CIS presets with ready-to-run Windows, Active Directory and Linux scripts.
Open toolHow long every length and character mix survives a modern GPU cracking rig.
Open tool