Random Passphrase Generator

Each word is a uniform random pick from 1296 words, so every word adds ≈10.3 bits of entropy: a 5-word passphrase has about 51.7 bits — roughly 3.7 quadrillion combinations. The strength comes from the randomness of the picks, which a computer does far better than a human. Don't invent words yourself — human "randomness" is predictable.

It assumes the attacker already knows exactly how you generated the passphrase and brute-forces that known space offline at 10 billion guesses per second — the worst case. Real attackers usually start with common-password dictionaries and don't know your method, so real-world resistance is typically much higher. We report the pessimistic number so you can judge for yourself.

5 words (≈51.7 bits) is fine for everyday accounts. Use 6 or more (≈62+ bits, ~15+ years of worst-case offline brute force) for high-value accounts like email or your password manager. 3 words is weak against a determined offline attack.

It adds log₂(word count) bits — about 2.3 bits for 5 words — because an attacker who knows the method must also guess which word was capitalized. Small but real, and it helps satisfy "must contain an uppercase letter" password rules.

No — it is an estimate from a fixed, documented model. Real attackers may be weaker (they don't know your method) or stronger (targeted phishing, malware). Treat it as a transparent benchmark, not a promise.

No. There is no backend and no network requests. Words are drawn with the browser's cryptographic random generator (crypto.getRandomValues) and everything happens inside this page. Refresh the page and the passphrase is gone.