A small tool for a safer sign-in

Easier to Remember. Harder to Crack.

PassphraseIt turns randomly selected words into a strong, memorable passphrase—generated in your browser. No account required.

Create your passphrase

Choose your settings

Word count

Choose 3–10 words. Six is the default. 6 words selected

Word separator

Hyphen is the default. Hyphen separator

Optional touches Capitalize wordsStart each word with a capital letter. Add a numberInsert one random digit (0–9) anywhere. Add a special characterInsert one random !@#$%^&*?+= anywhere.

Generation and word selection happen here, in this browser.

Your passphrase

Local result

Your new phrase will appear here.

Copy is available after you generate a phrase.

Selection entropy Based on the selected word count

Copying happens only when you choose it. Clipboard history and other software on your device are outside this tool’s control.

How it works

Choose your word count and options. More words make a stronger passphrase.

Press Generate passphrase to get a random phrase, created only in your browser.

Copy it and save it in a password manager. Use a different phrase for every account.

Words come from the EFF list by the Electronic Frontier Foundation and Joseph Bonneau (CC BY 4.0). Credits and license.

Privacy

Generation and selection happen in this browser, without an account. The generator code does not send generated phrases to a server. Nothing is copied unless you explicitly press Copy phrase.

After copying, the phrase goes to your system clipboard. Clipboard history and other software on your device are outside this tool’s control.

The generator keeps output only in the current page’s memory. Its code does not put generated phrases in URLs, logs, cookies, browser storage, or a saved history.

This site loads Google AdSense, a third-party advertising service. Google may collect information such as your IP address and browser details and use cookies for advertising. Third-party scripts run on this page and can access page content, so browser-local generation is not a guarantee of isolation from those scripts. Learn more about how Google uses information from sites that use its services and manage your Google ad preferences.

Limitations

Browser-local operation does not protect a compromised device or a malicious browser extension. Keep your browser and device maintained, and use a password manager to store unique credentials.

Websites may impose password length or character restrictions. Check a site’s requirements before using a phrase; a longer phrase may not be accepted everywhere.

A useful next step

Keep your newly generated passphrase somewhere safe.

Guides to choosing a password manager are planned for a future update.