Diceware Passphrase Generator

Equal-entropy random words are far easier to type and remember than equivalent character strings — that's the whole point of diceware.

It is a curated common-English list of 1,666 words (no profanity, no homophones, 3–7 letters). That is smaller than EFF's 7,776-word list, so each word carries about 10.7 bits here against EFF's 12.9 — roughly one extra word for every five to reach the same strength.

≥60 bits resists most online attacks; ≥80 bits resists determined offline attacks against fast hashes; ≥100 bits is recommended for master passwords.

It adds ~3.3 bits and helps satisfy systems that require a digit. Skip it if your service has no such rule.

Barely. A single appended digit contributes about 3.3 bits, which is a third of one extra word from this list. Adding a word is the cheapest real increase in strength; the digit and the capital are there to satisfy password rules, not to defend anything.

No, and assuming they know it is the correct way to measure. The strength comes from how many equally likely combinations exist, not from secrecy about the method — six words from 1,666 gives about 64 bits whether or not the list is public. A scheme that relies on a secret method is the one to distrust.