Words chosen at random
The words come from independent cryptographic draws, not from a familiar quote, lyric or sentence pattern.
Memorable by design
Free Passphrase Generator
Create a sequence of genuinely random words that is easier to type and remember than a wall of characters. Eight words by default, generated privately on your device.
- EFF short wordlist
- 83-bit default
- Nothing uploaded
Choose 3–12 words, a separator and optional settings below. Eight random words is the strong default.
Password generator
Generating…
Strength: Strong
83 bits of entropy
At the displayed attack rate, exhaustive search starts at roughly 190,000 years.
At 100 billion guesses a second, an offline attack would need about 1,260,974 years on average. That rate assumes a site stored your password badly; a properly stored one takes far longer to attack.
312
Every word is selected in your browser with crypto.getRandomValues. Your passphrase is never sent to PassGenFast or stored by this site.
Three ingredients
What makes this a strong passphrase?
Length helps only when the words were selected by a process an attacker cannot predict.
A list you can inspect
Every draw uses EFF Short Wordlist #1: 1,296 distinct words designed to be easier to read and type.
Strength you can count
Each random word adds about 10.34 bits. The displayed total comes from the choices the generator actually makes.
Word count guide
Every extra random word multiplies the possibilities
This generator uses EFF Short Wordlist #1, which contains 1,296 distinct words. One independent draw therefore contributes about 10.34 bits of entropy. Eight draws create roughly 1,296 to the eighth power possible sequences, or about 83 bits. The calculation assumes words may repeat, just as separate rolls of dice can repeat.
| Length | Entropy | Practical reading |
|---|---|---|
| 3 words | 31 bits | Too short for an important account |
| 4 words | 41 bits | Short; vulnerable if a password database leaks |
| 6 words | 62 bits | Better, but use more for a master password |
| 8 words | 83 bits | The strong default used by this generator |
| 10 words | 103 bits | Extra margin for high-value use |
| 12 words | 124 bits | The maximum available here |
These figures describe this generator’s random selection process. They do not estimate the strength of a phrase a person invented, even if it contains the same number of words.
Random words beat a clever sentence
A quotation, lyric or sentence about your life can be long and still be predictable. Password crackers test popular phrases, common grammar and leaked passwords before they begin a simple brute-force search. Randomly selected words remove those shortcuts: the next word does not follow naturally from the one before it.
Do not edit the result into a story, replace an odd word, or reuse the same phrase on another account. If you dislike a generated phrase, create a completely new one. Reuse remains dangerous because a breach at one service can expose the secret protecting another.
Where a passphrase is most useful
Use a passphrase where you genuinely need to type or remember the secret: a password-manager master password, a device login, or an encryption password. For ordinary websites, a longer random-character password saved by your manager is usually more convenient because you never need to type it.
A strong passphrase does not stop phishing, malware or an already compromised device. Turn on multi-factor authentication where it is available, keep recovery information somewhere safe, and follow any password rules imposed by the service or organisation you are using.
What the settings really change
The separator makes a phrase easier to read, but choosing a hyphen, dot, underscore or space does not add randomness. Capitalising every word is predictable too, so the tool correctly counts no extra entropy for that option. It exists for services that insist on a capital letter.
The number option is different: the generator randomly chooses both a digit and the word that receives it, so those choices add a small amount of entropy. Adding another full random word adds much more. When a service allows it, word count is the simpler way to gain strength.
Generated locally, with no weak fallback
Word indexes come from crypto.getRandomValues, the browser API intended for security-sensitive randomness. Values that would create a selection bias are discarded and redrawn. If the secure API is unavailable, the generator stops instead of silently switching to Math.random.
Generation happens after the page reaches your browser. No completed phrase is present in the server-rendered page, transmitted back to the host or placed in the URL. The privacy notice explains the boundary in detail.
General information, not security advice for your particular situation. Last reviewed August 12, 2026.
Choose the right tool
Need a password your manager will store?
Use the main generator for a long random-character password, or read the practical guide before choosing settings for an important account.
Answers
Frequently asked questions
What is the difference between a password and a passphrase?
A random password is usually a string of characters made for a password manager to store. A passphrase is a sequence of random words. It is longer on the screen, but often easier to type and remember, which makes it useful for the small number of secrets you must enter yourself.
How many words should a strong passphrase have?
With the 1,296-word short list used here, eight random words provide about 83 bits of entropy and are the default. Fewer words may be easier to type, but every removed word cuts the number of possible phrases by a factor of 1,296. Use more words when the account or encrypted data is especially valuable.
Source: EFF: Dice-Generated Passphrases
Why use random words instead of a sentence I invent?
People choose quotations, grammar and word combinations in predictable ways, so an attacker does not need to try every possible sentence. Independent random draws give every word position a known number of possibilities. A personal sentence may be memorable, but its strength cannot be calculated from its length alone.
Can the same word appear twice?
Yes. Every word is drawn independently, so an occasional repeat is a valid random result. Replacing a repeated word because it looks unusual adds a human rule to the process. Generate a completely new phrase instead if you do not like the result.
Can I use this for my password manager?
A long random passphrase can be a practical fit for a password-manager master password because it is one of the few secrets you need to type from memory. Use it only for that manager, enable multi-factor authentication when available, and follow the manager's recovery guidance so forgetting it does not lock you out permanently.
Do capitals, separators or a number make it stronger?
A separator helps readability but is a setting you chose, so it adds no randomness. Capitalising every word is also predictable and adds no entropy. When you enable a number, this tool chooses both its digit and its word position at random and includes those choices in the strength total.
Do you see or store the passphrases I generate?
No. The words are selected by JavaScript on your device with crypto.getRandomValues. The finished passphrase is never sent in a request, placed in the page address or stored by PassGenFast. If you press Copy, it remains on your device clipboard until another item replaces it.
Source: MDN: Crypto.getRandomValues()