Home›Generators›Security›Passphrase Generator

Passphrase Generator

Security

Generate strong, memorable passphrases from a curated word list. Customise word count, separator, and capitalisation — browser-based, no sign-up required.

Reviewed by the thecalcu.com team · Last updated June 17, 2026

What is a Passphrase?

A Passphrase Generator creates a sequence of random words drawn from a curated word bank and joins them with a separator of your choice, producing credentials like anchor-raven-maple-frost-62 that are both long enough to be strong and structured enough to be memorable. Unlike a conventional password where every character is independently random, a passphrase groups randomness into recognisable word chunks that the human memory is far better at retaining.

The idea was popularised by XKCD comic 936 ("correct horse battery staple"), which illustrated that four random words are simultaneously easier to remember and mathematically harder to brute-force than a short mixed-character string. The key word is random, passphrases only work when the words are chosen by a truly random process, not by a person. Humans gravitate toward words from a narrow vocabulary slice (pets, places, films) and combine them in predictable ways, which undermines security. This generator eliminates that bias by drawing each word from a 256-word bank using the cryptographically secure crypto.getRandomValues() API.

Each word in the bank contributes exactly 8 bits of entropy, a clean measure based on the 256-word pool size (log₂(256) = 8). A 4-word passphrase therefore provides 32 bits; a 5-word passphrase provides 40 bits; a 6-word passphrase provides 48 bits. Appending the optional 2-digit random number adds a further 6.5 bits. For high-value credentials such as a password manager master key, choose 6 or more words.

For random character-dense credentials such as API keys or system passwords, the Password Generator remains the right tool. For unique technical identifiers, the UUID Generator is more appropriate. A passphrase is specifically designed for credentials a person needs to type or recall directly.

Why Use a Passphrase Generator?

The recurring problem with strong passwords is that the strength comes at the cost of memorability: a 16-character random string is powerful but requires a password manager or significant memorisation effort. Passphrases solve this by trading character density for word-level length, four to six common words are far easier to hold in memory than sixteen random characters, yet the overall entropy is comparable or higher once the word count is sufficient.

The other problem passphrases solve is the "memorable but weak" password people end up creating when forced to choose something they can type: a pet's name, a birth year, a film title with an exclamation mark. These all fall into the patterns that dictionary attacks and credential-stuffing tools target first. A randomly generated passphrase has none of those patterns because no person chose the words.

Who Should Use This Generator?

Anyone setting a password manager master key, the one password that has no safety net if forgotten, benefits most from a passphrase. It needs to be remembered under pressure and never written down in an insecure place; a four-to-six word phrase is far more memorable than a random character string. Developers setting up SSH keys, database access credentials, or VPN passwords where memorability matters use passphrases to avoid pasting the credential into every session. Non-technical users who find character-dense passwords too hard to remember gain real security without needing to manage a password manager for every account.

For all other account passwords that will be stored in a manager and never typed manually, the Password Generator is the right tool, save the passphrase approach for the credentials that need to live in human memory.

What Insights Does the Passphrase Generator Give You?

Four controls let you tune the output for any site's password rules:

Number of Words determines the core entropy. Each word contributes 8 bits (drawn from a 256-word bank): 4 words = 32 bits, 5 words = 40 bits, 6 words = 48 bits. Increase the count whenever a site allows long passwords.

Separator controls the character between words. Hyphen and dot are universally accepted; space works on most modern systems but some older ones reject it; underscore is common in technical contexts; none produces a single compound string that is harder to type but denser.

Capitalise Each Word title-cases each word, satisfying "must contain uppercase" requirements and making word boundaries visually clearer when no separator is used.

Append a Random Number adds a two-digit number (10–99, drawn with crypto.getRandomValues) after the last word, satisfying "must contain a number" requirements and adding 6.5 bits of additional entropy.

How to use this Passphrase calculator

  1. Set Number of Words to the word count you need, 4 for quick accounts, 6 or more for a master password.
  2. Choose a Separator from the dropdown that matches the rules of the site or system you're signing up for.
  3. Toggle Capitalise Each Word on if the site requires at least one uppercase letter.
  4. Toggle Append a Random Number on (it is on by default) if the site requires a digit.
  5. Click Generate, the passphrase appears immediately in the Generated Passphrase output box.
  6. Click the copy button to copy the passphrase to your clipboard in one click.
  7. Paste it into the password field and save it in your password manager before closing the tab.

Formula & Methodology

The generator maintains a curated bank of 256 common English words, nouns and adjectives, 4–8 characters each, chosen for memorability and unambiguous pronunciation. The bank size of 256 = 2⁸ gives a clean 8 bits of entropy per word, making strength calculations straightforward.

Word selection: each word is drawn using crypto.getRandomValues() to fill a Uint32Array. Rejection sampling is applied, any value outside the largest multiple of 256 that fits in a 32-bit integer is discarded and resampled, eliminating the modulo bias that would otherwise make certain words marginally more likely than others.

Number selection: the optional two-digit number (10–99) is drawn with the same rejection-sampling approach over the range [10, 99], contributing log₂(90) ≈ 6.5 additional bits of entropy.

Full entropy table (with number appended):

| Words | Entropy (words only) | Entropy (+ number) |
|---|---|---|
| 3 | 24 bits | ~30.5 bits |
| 4 | 32 bits | ~38.5 bits |
| 5 | 40 bits | ~46.5 bits |
| 6 | 48 bits | ~54.5 bits |
| 7 | 56 bits | ~62.5 bits |

All generation runs entirely in your browser, nothing is transmitted to any server at any point.

Frequently Asked Questions

A passphrase is a sequence of random words joined by a separator, for example, 'grape-anchor-shark-76' or 'river.noble.falcon.52'. Unlike a conventional password that combines random characters, a passphrase gains strength from length: each additional word multiplies the number of possible combinations while keeping the result something a human can actually remember or type.
A password is typically a short, dense string of mixed characters (uppercase, lowercase, numbers, symbols) that is hard to remember. A passphrase is a longer sequence of ordinary words that is easier to recall but achieves comparable or greater security through sheer length. 'Grape-anchor-shark-76' is longer and harder to brute-force than 'Gr@p3!' even though it feels more readable.
Every word is selected using the browser's Web Crypto API (crypto.getRandomValues), a cryptographically secure random source, the same class of randomness used for encryption keys. Rejection sampling is applied to eliminate modulo bias, so every word in the 256-word bank has exactly equal probability of appearing. Nothing is derived from your device, your IP, or the current time.
With this tool's 256-word bank (8 bits of entropy per word), a 4-word passphrase yields 32 bits of entropy, adequate for low-stakes accounts. 5 words gives 40 bits and 6 words gives 48 bits, which is strong for most personal use. Add the optional random number (+6.5 bits) for extra margin. For master passwords or encryption keys, choose 7 or more words.
Set Number of Words to the count you want (3–10), choose a Separator from the dropdown, toggle Capitalise Each Word and Append a Random Number on or off, then click Generate. The passphrase appears in the output box immediately. Click the copy button to copy it to your clipboard.
The Separator dropdown offers five options: hyphen (word-word), space (word word), dot (word.word), underscore (word_word), or none (wordword). Choose the one that matches the rules of the system you're creating a credential for. Some services reject spaces in passwords; hyphens and dots are universally accepted.
When enabled (the default), a two-digit number between 10 and 99 is appended after the last word, also separated by your chosen separator. This adds approximately 6.5 bits of additional entropy and satisfies the 'must contain a number' requirement that many sites enforce, without requiring you to memorise where the number falls within the phrase.
Yes, generation happens entirely inside your browser using the Web Crypto API. No word selections, no passphrases, and no form inputs are ever sent to a server. The tool has no backend, no logging, and no analytics tracking individual outputs. Closing the tab removes any trace of what was generated.
No. The passphrase exists only in your browser's memory for as long as the tab is open. Once you copy it and navigate away, it is gone. There is no server-side storage, no account required, and no history of previous generations.
It is mathematically possible but practically negligible. A 4-word passphrase drawn from 256 words has 256⁴ = about 4.3 billion possible combinations; with a 2-digit number appended, that rises to roughly 387 billion. The probability of any two users generating the exact same passphrase is vanishingly small, and the tool has no memory of previous outputs.
For accounts you type manually and need to remember, like a password manager master key, a device unlock PIN, or an email login, a passphrase is often the better choice: it is longer (more entropy) and easier to recall. For everything else, generate a unique random password with the [Password Generator](/password-generator/) and store it in a password manager. You do not need to memorise passwords your manager stores for you.
Yes, most modern login forms accept passphrases, though a few older systems cap password length at 16–20 characters, which may truncate a long phrase. Check the site's password rules before using one. For technical credentials like API tokens and database passwords, the [UUID Generator](/uuid-generator/) or [Password Generator](/password-generator/) may be more appropriate formats.
Also known as
random passphrasememorable password generatorword-based passworddiceware passphrase