Generate passphrases using official EFF wordlists — the same standard used by Bitwarden and 1Password. Live entropy display, crack-time estimate, and wordlist comparison. Everything runs in your browser; nothing is sent to any server.
Password generators, passphrase tools, username generators — all free
Numbers, names, games and more
| Wordlist | Words | Bits/word | Avg word length | Best for |
|---|---|---|---|---|
| EFF Long | 7,776 | 12.9 | 7.0 chars | Maximum entropy per word — standard recommendation |
| EFF Short | 1,296 | 10.3 | 4.5 chars | Easier to type; add 1–2 extra words to compensate |
| EFF Typo-Tolerant | 1,296 | 10.3 | 4.5 chars | Forgives typos — each word differs by ≥3 characters |
Diceware was invented by Arnold Reinhold in 1995. The method: roll five dice, use the result as an index into a numbered word list, repeat for each word in your passphrase. The EFF modernized this in 2016 with improved wordlists designed for memorability and clarity.
This generator replaces physical dice with crypto.getRandomValues() — the same cryptographic-quality randomness your browser uses for TLS. The result is mathematically equivalent to rolling dice, but faster and with no transcription errors.
Diceware is a method for creating strong, memorable passphrases by randomly selecting words from a numbered word list. Originally you rolled physical dice — hence the name. The Electronic Frontier Foundation created improved wordlists in 2016 with words that are easy to spell, say aloud, and remember. This generator uses crypto.getRandomValues() for equivalent cryptographic-quality randomness.
The EFF Long list (7,776 words, 12.9 bits/word) gives the highest entropy per word and is the standard recommendation. The EFF Short list uses shorter words that are easier to type on mobile — add 1–2 extra words to reach the same entropy. The Typo-Tolerant list has the same entropy as EFF Short but is more forgiving of typing errors, since each word differs from every other by at least 3 characters.
For most accounts, 4–5 words from EFF Long (51–64 bits) is a good baseline. For high-value accounts — email, banking, or your password manager's master password — use 6+ words (77+ bits). The crack-time estimate assumes an extremely fast attacker running 100 trillion guesses per second. At 64 bits, that still takes over 2,000 years.
Yes. All generation happens in your browser — nothing is sent to any server. The wordlists are embedded in the page so it works offline. Randomness comes from crypto.getRandomValues(), which is cryptographically secure. Your passphrases never leave your device.
Yes. You can add a number or symbol manually to satisfy site requirements without losing the memorability advantage. Many sites also accept passphrases as-is since they're long enough to pass any reasonable password policy. If a site rejects your passphrase due to length, that site has poor security requirements — consider using a password manager to store a randomly generated password for it instead.
Security professionals, sysadmins, and privacy-conscious users rely on diceware for credentials that need to be both typed from memory and extremely strong — password manager master passwords, full-disk encryption keys, SSH passphrases, and account recovery codes. The EFF wordlists are the same standard embedded in Bitwarden, 1Password, and other professional password managers.