Passphrase Generator

A passphrase is a secret made of several whole words rather than a scramble of characters, for example "brisk-cedar-lantern-mosaic". It is different from a password in how it earns its strength: a password leans on an unpredictable character mix, while a passphrase leans on length and on the words being chosen at random. Both are measured the same way, in bits of entropy, and a passphrase of enough words beats a short password comfortably while staying far easier to type and recall.

Four words is a sensible floor for ordinary accounts and six or more for anything that protects other secrets, such as a password manager master password or an encryption key. With this generator's 3143-word list, each word adds 11.6 bits, so a six-word passphrase lands around 70 bits, beyond the reach of an offline attack for the foreseeable future.

Yes, and it is not close. Substitutions like @ for a and 0 for o are the first thing every cracking tool tries, so "P@ssw0rd123" has almost the strength of "password123", which is to say almost none. A passphrase drawn at random has no dictionary shortcut to exploit, because the attacker has to search the full space of word combinations rather than a short list of predictable mangles.

Marginally, and far less than one more word. Capitalizing the first letter of each word is a pattern the attacker will assume anyway, and a two-digit number adds under 7 bits. Adding a single extra word adds more entropy than both combined. Use those options because they help you satisfy a site's character rules or because you like how it reads, not because you are counting on them for security.

No. The wordlist is part of the page and every passphrase is assembled locally with crypto.getRandomValues(). No network request carries the result, nothing is stored, and you can disconnect from the internet and keep generating. Closing the tab is enough to destroy it.

That is exactly what it is for. The Envless workspace passphrase derives the key that encrypts every variable in the workspace, it is never transmitted to us, and there is no reset link, so it needs to be both strong and memorable, which is the case a passphrase handles best. Envless enforces a minimum of 16 characters with character variety; a five or six word passphrase clears that comfortably.

Put it in a password manager rather than a note, a chat message, or a repository. For the one passphrase that unlocks the password manager itself, a written copy stored somewhere physically secure is a reasonable backup. The realistic threat to a piece of paper in a safe is very different from the threat to a string in a text file.

Diceware is the original method: roll physical dice, look the numbers up in a numbered wordlist, repeat. This generator uses the same principle with your browser's cryptographic random number generator in place of the dice, drawing uniformly from a curated 3143-word list. The security argument is identical; you just do not need five dice and a printout.