CanDoYa
All tools
Saved toolsYour favorites

Add to favorites

Saved in this browser only.
Private browser utility / Developer

Free Passphrase Generator

English only

Runs entirely in your browser - no upload, no sign-up.

Live workspaceLocal processing

Secure setup

Build your phrase

EFF list - 1,296 words
Password policy options

Generated locally

Output

Loading…

Estimated entropy
Not generated
Random search space
Not generated
Word source
EFF Short #1

6 independent words x 10.34 bits per word. Formatting adds no entropy.

Six words give about 62 bits before optional extras.

Share this tool
passphrase generator / browser utility
01 / Overview

What is a passphrase generator?

A passphrase generator selects unrelated words at random to make a secret that is long, hard to guess, and easier to type than random characters. This one uses the browser's cryptographic random source and a local 1,296-word EFF list. Your generated phrase stays on your device.

02

How to use

  1. 01
    Choose the word count

    Pick 3 to 10 words. Six is the default and gives about 62 bits from the 1,296-word list before optional extras.

  2. 02
    Set the format

    Choose a hyphen, space, dot, or underscore. Add title case, a random four-digit number, or a random symbol only when the target password policy needs them.

  3. 03
    Generate securely

    Press Generate another at any time. The browser selects every word and optional value with its cryptographic random number generator.

  4. 04
    Copy and store it safely

    Copy the phrase once, save it in a trusted password manager, and avoid reusing it for another account or encrypted file.

03

Who it's for

  • Password manager users creating a master passphrase they can remember and type without exposing a short, human-made phrase.
  • Laptop and phone owners choosing a long secret for full-disk encryption or an encrypted backup.
  • Developers and administrators protecting SSH keys, recovery archives, Wi-Fi networks, and other secrets that may need manual entry.
  • Teams with strict password policies adding a random number, symbol, or title case while keeping the core word choices unbiased.

This generator bundles EFF Short Wordlist #1, published by the Electronic Frontier Foundation under CC BY 3.0. Each word is chosen independently from 1,296 possibilities with the Web Crypto API. The tool uses rejection sampling so every word has the same chance, then joins the words using your chosen separator. It makes no network request to generate a phrase.

The entropy total counts only random choices. A fixed separator and predictable title case do not enlarge the search space, so they add zero bits. A random four-digit number or symbol does add measurable entropy because its value is selected independently. Use those options to satisfy a site's password rules, not as a substitute for enough words.

FAQ

Is this passphrase generator free?

Yes. It is free to use without an account, download, or generation limit. The working code and EFF wordlist load with the page, and the passphrase itself is created by your browser. You can regenerate as often as you need.

Is my generated passphrase uploaded or saved?

No. Random word selection happens locally in your browser, and the generated phrase is not sent to CanDoYa. The tool does not save a history. Remember that your operating system or browser may keep clipboard history after you press Copy.

How many words can I generate?

You can choose from 3 to 10 words. The default six-word phrase has about 62 bits of ideal entropy with this 1,296-word list. Three or four words have a much smaller search space, while each additional independent word adds about 10.34 bits.

Is this the same as Diceware?

It follows the same core method: choose each word independently from a numbered list. Classic Diceware uses physical dice. This tool replaces the dice rolls with cryptographically secure browser randomness and uses EFF Short Wordlist #1, which contains 1,296 entries mapped to four dice.

Does capitalization or a separator make the phrase stronger?

Not when the format is fixed and visible. An attacker can assume you used title case and a hyphen, so those choices add no random entropy. The tool reports strength from random word, digit, and symbol choices only instead of treating cosmetic formatting as secret.

Can I use a passphrase as my password manager master password?

A long, independently generated passphrase is well suited to a secret you must remember and type, including a password manager master password. Use enough words, keep the phrase unique, protect any written recovery copy, and follow the password manager's own recovery guidance.

Should I keep generating until the words form a sentence?

No. Repeatedly rejecting phrases until one looks meaningful introduces human preference into an otherwise uniform process. Accept unrelated words unless a word is genuinely difficult for you to type or remember. If you reroll, keep the word count high and do not edit the result into a familiar quote.