Passphrase Generator
String common English words with a separator you choose. This list is much smaller than Diceware. Words are still sampled with Web Crypto.
Rated 4.7 out of 5 based on 520 reviews
How to generate a word passphrase
- Set Word count from 3 to 12. Six words is the default.
- Set the separator. A hyphen is typical. A space is allowed if you will type the phrase by hand.
- Set how many passphrases to print, then generate.
- Copy into a password manager. CZNull does not store the words. Prefer the character password page if a site forbids spaces and hyphens.
Word passphrase
Memorable secret from a short English word list
| Word list size | About 2000 common English words, not Diceware 7776 |
|---|---|
| Word count | 3 to 12 words per passphrase |
| Sampling | Independent Web Crypto draws, words may repeat |
| Separator | User-set string, default hyphen |
| Storage | None. The phrase exists only in this tab until you copy it |
| Related secret | Character password generator for mixed alphabets |
Honest word-list size, not Diceware
Diceware on the EFF Large Wordlist uses 7776 words, so each word is about 12.9 bits if the draw is uniform. This page uses a much shorter list of common English words, about 2000 entries. Each word therefore carries less entropy than a true Diceware word. The sampling is still Web Crypto. The honesty is about the dictionary, not about the RNG. Do not cite this page as Diceware.
How words are picked
Each word is an independent uniform draw from the local list. Repeats can happen. There is no dice roll UI and no numbered word table. The separator is inserted between words only. It is not encrypted. Change Word count if you want a longer phrase. Six words is a starting point, not a guarantee for every threat model.
Passphrase versus character password
A passphrase is easier to type and remember. A random password packs more variety into the same length because the alphabet includes letters, digits, and symbols. Use the password page when a form rejects spaces or has a short maximum length. Use a PIN only when the system is numeric. Use a random string for tokens that are not login secrets.
Nothing is stored
Generation runs in this tab. Refreshing the page drops the phrase unless you copied it. CZNull does not receive the words. Put the result in a password manager. Do not paste it into email or a ticket.
Strength in plain terms
More words help more than a fancy separator. A two-word phrase from a short list is weak. A six to eight word phrase is in the usual memorable range, still bounded by this dictionary. If an attacker knows you used this exact page, they know the list is smaller than Diceware. Add length or switch to the character generator when that matters.