Why words instead of random characters?

Equal-entropy random words are far easier to type and remember than equivalent character strings — that's the whole point of diceware.

Is the word list the EFF one?

It's a curated common-English list of ~1300 words (no profanity, no homophones, 3–7 letters). Slightly smaller than EFF's 7776-word list, but with the same passphrase-quality goal.

How many bits do I need?

≥60 bits resists most online attacks; ≥80 bits resists determined offline attacks against fast hashes; ≥100 bits is recommended for master passwords.

Is the appended digit useful?

It adds ~3.3 bits and helps satisfy systems that require a digit. Skip it if your service has no such rule.

Diceware Passphrase Generator

Diceware-style passphrases combine 4–8 random words to create something humans can memorize but computers cannot guess. Picks are made with `crypto.getRandomValues` and rejection sampling, so the result is unbiased. Customize separator, capitalization, and an optional appended digit. The estimated entropy is shown live — aim for ≥80 bits for important accounts.

—

Word countSeparatorCapitalize each wordAppend a random digitSatisfies sites that require at least one digit

About diceware

Words are picked with crypto.getRandomValues using rejection sampling for unbiased selection. Nothing is sent over the network.

How to use

Pick a word count (5–7 is common for online accounts; 7+ for password-manager master keys).
Pick a separator (dash and dot are clipboard-safe).
Click generate, copy, store somewhere you trust.

Frequently asked questions

Why words instead of random characters?: Equal-entropy random words are far easier to type and remember than equivalent character strings — that's the whole point of diceware.
Is the word list the EFF one?: It's a curated common-English list of ~1300 words (no profanity, no homophones, 3–7 letters). Slightly smaller than EFF's 7776-word list, but with the same passphrase-quality goal.
How many bits do I need?: ≥60 bits resists most online attacks; ≥80 bits resists determined offline attacks against fast hashes; ≥100 bits is recommended for master passwords.
Is the appended digit useful?: It adds ~3.3 bits and helps satisfy systems that require a digit. Skip it if your service has no such rule.

Guides on this topic

Passwords and Passphrases: What Actually Makes One Strong Why length beats symbol substitution, where password strength meters mislead, how passphrases work, and what two-factor authentication does and does not protect.

Related tools

Password Generator

Generate strong, random passwords that never leave your browser.

Random 0 0

Random Bytes Generator

Generate cryptographically secure random bytes in 9 output formats — hex, Base64, Base64URL, binary, decimal, C array, Python bytes, UUID v4.

Random 0 0

Random Number Generator

Generate cryptographically random numbers in any range — with or without duplicates, optionally sorted.

Random 0 0

WiFi QR Code Generator

Generate a scannable QR code that joins a WiFi network — print it for guests, no app needed.

Random 0 0

Lottery Number Generator

Generate random tickets for 8 popular lotteries (Powerball, EuroMillions, Lotto 6/45, Loto 6, 双色球…) — uses crypto-secure RNG.

Random 0 0

Random Color Generator

Generate a grid of random colors in HEX, RGB or HSL — pick how many, copy any value with one click, and regenerate instantly for design inspiration.

Random 0 0