--- title: "Passphrase Generator - Secure Random Words" description: "Generate a secure random passphrase from EFF words. Adjust length and separators, see honest entropy, and copy it locally in your browser." url: https://candoya.com/tools/passphrase-generator/ locale: en type: browser-tool --- # Free Passphrase Generator Category: [Developer](https://candoya.com/tools/dev/) ## What is a passphrase generator? A passphrase generator selects unrelated words at random to make a secret that is long, hard to guess, and easier to type than random characters. This one uses the browser's cryptographic random source and a local 1,296-word EFF list. Your generated phrase stays on your device. This generator bundles [EFF Short Wordlist #1](https://www.eff.org/files/2016/09/08/eff_short_wordlist_1.txt), published by the Electronic Frontier Foundation under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/). Each word is chosen independently from 1,296 possibilities with the Web Crypto API. The tool uses rejection sampling so every word has the same chance, then joins the words using your chosen separator. It makes no network request to generate a phrase. The entropy total counts only random choices. A fixed separator and predictable title case do not enlarge the search space, so they add zero bits. A random four-digit number or symbol does add measurable entropy because its value is selected independently. Use those options to satisfy a site's password rules, not as a substitute for enough words. ## How to use it 1. **Choose the word count** - Pick 3 to 10 words. Six is the default and gives about 62 bits from the 1,296-word list before optional extras. 2. **Set the format** - Choose a hyphen, space, dot, or underscore. Add title case, a random four-digit number, or a random symbol only when the target password policy needs them. 3. **Generate securely** - Press Generate another at any time. The browser selects every word and optional value with its cryptographic random number generator. 4. **Copy and store it safely** - Copy the phrase once, save it in a trusted password manager, and avoid reusing it for another account or encrypted file. ## Who it's for - **Password manager users** creating a master passphrase they can remember and type without exposing a short, human-made phrase. - **Laptop and phone owners** choosing a long secret for full-disk encryption or an encrypted backup. - **Developers and administrators** protecting SSH keys, recovery archives, Wi-Fi networks, and other secrets that may need manual entry. - **Teams with strict password policies** adding a random number, symbol, or title case while keeping the core word choices unbiased. ## Expert note Mapping a 32-bit random value directly with value % 1296 would slightly favor some words because 1,296 does not divide 2^32. This generator rejects values in the incomplete upper tail before applying the remainder, preserving a uniform 1-in-1,296 chance for every entry. ## Frequently asked questions ### Is this passphrase generator free? Yes. It is free to use without an account, download, or generation limit. The working code and EFF wordlist load with the page, and the passphrase itself is created by your browser. You can regenerate as often as you need. ### Is my generated passphrase uploaded or saved? No. Random word selection happens locally in your browser, and the generated phrase is not sent to CanDoYa. The tool does not save a history. Remember that your operating system or browser may keep clipboard history after you press Copy. ### How many words can I generate? You can choose from 3 to 10 words. The default six-word phrase has about 62 bits of ideal entropy with this 1,296-word list. Three or four words have a much smaller search space, while each additional independent word adds about 10.34 bits. ### Is this the same as Diceware? It follows the same core method: choose each word independently from a numbered list. Classic Diceware uses physical dice. This tool replaces the dice rolls with cryptographically secure browser randomness and uses EFF Short Wordlist #1, which contains 1,296 entries mapped to four dice. ### Does capitalization or a separator make the phrase stronger? Not when the format is fixed and visible. An attacker can assume you used title case and a hyphen, so those choices add no random entropy. The tool reports strength from random word, digit, and symbol choices only instead of treating cosmetic formatting as secret. ### Can I use a passphrase as my password manager master password? A long, independently generated passphrase is well suited to a secret you must remember and type, including a password manager master password. Use enough words, keep the phrase unique, protect any written recovery copy, and follow the password manager's own recovery guidance. ### Should I keep generating until the words form a sentence? No. Repeatedly rejecting phrases until one looks meaningful introduces human preference into an otherwise uniform process. Accept unrelated words unless a word is genuinely difficult for you to type or remember. If you reroll, keep the word count high and do not edit the result into a familiar quote. ## Related tools - [Password Generator](https://candoya.com/tools/password-generator/) - [Password Strength Meter](https://candoya.com/tools/password-strength-meter/) - [TOTP Code Generator](https://candoya.com/tools/totp-code-generator/) - [File Hash Calculator](https://candoya.com/tools/file-hash/) - [Rail Fence Cipher](https://candoya.com/tools/rail-fence-cipher/) --- *Markdown edition of , published for AI agents and other automated readers. Index of key pages: .*