Free tool · works offline · no upload
Passphrase and password generator
A few random words are easier to remember and type than a jumble of symbols, and just as hard to guess. Pick the length and copy the one you like.
Made in this page by your browser's cryptographic random generator. What you make is never sent or saved: apart from a cookie-free visit count, this page's security policy blocks it from sending anything.
How to use it
- Choose a passphrase or a password.
- For a passphrase, pick how many words and what goes between them. Six words is a good default.
- For a password, pick the length and which characters to use.
- Read the strength line: it says how long a fast attacker would need to guess it.
- Copy one of the five suggestions, or press Make new ones for another set.
Where the words come from
The words come from a published list of 2,048 common English words, chosen so that similar-looking words are avoided and the first four letters are enough to tell any word apart. It is the same standard list Silo uses for recovery phrases. Because the list has 2,048 words, each random word adds exactly 11 bits of strength.
Strength comes from the randomness, not the words. “correct horse” is weak if you chose it, and strong if a fair random process picked it from thousands of options. That’s why you shouldn’t swap a word you don’t like for one you do: pressing Make new ones keeps the choice random.
What the strength line means
Bits measure how many possibilities an attacker has to try. Every extra bit doubles the work. The line assumes a determined attacker making ten billion guesses a second, which is realistic for stolen password files protected by fast hashing. Most online accounts limit guesses far more strictly, so in practice your phrase is much safer than the line suggests.
- Under 44 bits: fine only where guesses are limited, such as a phone PIN screen.
- 56 to 70 bits: strong for accounts and most uses.
- 70 bits and up: suitable for encrypting files, where an attacker can try offline as fast as their hardware allows.
Private by design
A password generator that runs on a server could log what it makes. This one runs entirely in your browser, from the page you loaded, and keeps nothing once you close it. Apart from a cookie-free visit count, the page is not allowed to send anything.
Questions
Is this generator really random?
Yes. It uses your browser's cryptographic random number generator, the same source used for encryption keys, and picks each word or character so that every option is exactly equally likely.
How many words should a passphrase have?
Six words from this list give about 66 bits, which is strong for almost any account. Use seven or more for something that protects encrypted files, where an attacker can guess offline at full speed.
Does capitalizing words or adding a digit help?
Only a little. An attacker who knows the rule tries it too, so capitals add nothing and a digit adds a few bits. Adding one more word adds 11 bits, which is far more.
Is anything I generate saved or sent?
No. The phrases exist only in this page while it's open. Nothing is stored, and apart from a cookie-free visit count, the page's security policy blocks it from sending anything.
Should I use this for my Silo recovery phrase?
No. Silo makes your recovery phrase for you when you set up the vault. Use this generator for passwords elsewhere, such as an account or an encrypted file.