Passphrase Generator
Secure and memorable: random words instead of random characters.
🔒 Generated in your browser, never sent or stored
Word Count
Passphrases, Explained
A passphrase strings together several random words instead of random characters, the classic "correct horse battery staple" idea. Each word is drawn from the EFF's large wordlist (7,776 words, public domain), giving roughly 12.9 bits of entropy per word. That often adds up to more total security than a shorter random-character password, and it's far easier to remember and type.
Word selection uses the same cryptographically secure method as the rest of Password Lizard: the browser's Web Crypto API (crypto.getRandomValues) with rejection sampling, so every one of the 7,776 words has an exactly equal chance of being picked rather than the list's earlier entries being favored.
FAQ
What is a passphrase vs. a password?
A password is a string of characters; a passphrase is a string of words. Because each word carries more entropy than a single character, a passphrase can be both easier to remember and harder to crack than a shorter random-character password.
How many words should I use?
Five or six words is a solid default for most accounts. Add a word or two for anything especially sensitive, like a password manager's master password.
Where does the word list come from?
The EFF's large wordlist: 7,776 common, easy-to-read English words curated by the Electronic Frontier Foundation specifically for generating secure passphrases. It's public domain and widely used.
How is each word actually chosen?
Each word is selected using the browser's Web Crypto API (crypto.getRandomValues) with rejection sampling, the same method used throughout Password Lizard, so every one of the 7,776 words has an exactly equal chance of being picked, with no word favored over another.