Passphrase Generator

Create memorable passphrases from common words, like river-moon-fox.

Generate memorable passphrases from a built-in list of 120 common words. Choose 3 to 8 words, pick your separator, and optionally capitalize words or add a number.

Loading tool…

If the tool stays on this message, make sure JavaScript is enabled, then reload the page.

About Passphrase Generator

The best password is one you can actually remember, because the password you can't remember ends up on a sticky note. Passphrases trade random characters for random words: a string of ordinary words is far easier to memorize and type than a tangle of symbols, while still being brutally hard to guess. This generator builds them from a built-in list of 120 common words, entirely in your browser.

You choose the length, three to eight words, plus a separator and optional capitalization or a number, which helps when a site demands character variety. The words are picked with your browser's cryptographic random number generator, the same class of randomness used for security-sensitive work. Four or more words is a sensible minimum for anything that matters; each additional word multiplies the guessing space enormously.

A few ground rules. Never reuse a passphrase across accounts, if one site leaks it, every account sharing it is exposed. Generate a fresh one instead of editing an old favorite, because human edits follow predictable patterns that attackers know. And even though it's memorable, store it in a password manager anyway. Memory is unreliable; the manager is not.

How to use Passphrase Generator

  1. Choose how many words and which separator to use.
  2. Click Generate.
  3. Copy the passphrase and store it in a password manager.

Why use this tool?

  • Easy to remember, hard to guess
  • Built-in list of 120 common words
  • 100% client-side and private

Tips for best results

  • Use at least 4 words for important accounts, each extra word multiplies the guessing space.
  • Pick a separator that the site accepts; some sites reject spaces, so check before committing.
  • Turn on capitalization or the number option when a site demands character variety.
  • Never reuse the same passphrase on two accounts, one leak would expose both.
  • Generate a fresh passphrase rather than editing a favorite, human edits follow predictable patterns.
  • Store it in a password manager even though it's memorable, memory is unreliable.

Frequently asked questions

Why use a passphrase instead of a password?
Longer phrases are easier to remember and type, and can be just as hard to guess as short complex passwords. Memorability is a security feature. It keeps passwords off sticky notes.
How many words should I use?
Four or more words is a good minimum for important accounts. More words means a much larger guessing space for attackers.
Is the word selection random?
Yes, words are picked with your browser's cryptographic random number generator, and everything happens locally on your device.
What if a site rejects spaces in passwords?
Regenerate with a different separator, like hyphens or no separator at all, instead of editing the passphrase by hand.
Is a passphrase weaker than a random-character password?
Not meaningfully, at sufficient length. A 4+ word passphrase has a guessing space far beyond what brute force can touch, length is what matters most.

Related tools

Password GeneratorCreate strong random passwords with full control over the mix. Password Strength CheckerCheck password strength with an entropy-based score and tips. Username GeneratorGenerate catchy usernames in styles like SwiftFox42. Random Number GeneratorGenerate random numbers with unique and sort options.