Generate memorable but secure passphrases using the Diceware method with customizable word count and separators.
This tool builds passphrases the Diceware way: it draws a fixed number of words independently and uniformly at random from a large wordlist, then joins them with a separator you choose - hyphen, space, period, or none. Word count and separator are adjustable, and an entropy estimate is shown alongside the result. The most common mistake is treating a longer or oddly-capitalized passphrase as automatically stronger: tacking on a digit or capital letter barely moves the entropy needle compared to simply choosing one more word from the list.
Each word is chosen independently and uniformly from a fixed wordlist - commonly one sized in the thousands, such as the EFF long wordlist's 7,776 entries - using the browser's cryptographically secure random number generator rather than Math.random(). Word count (typically 4-8) and the separator character are set before generation, and nothing about the chosen words persists once the page is closed.
Below the passphrase the tool reports bits of entropy, computed as word count times log2(wordlist size). A 7,776-word list contributes about 12.9 bits per word, so a 5-word passphrase carries roughly 64.6 bits and a 6-word passphrase roughly 77.5 bits - figures that hold only if the words are left exactly as generated, unedited.
Diceware's strength comes from word count against a large, fixed list, not from decoration. Appending one digit to a 6-word passphrase adds only a few bits, versus roughly 12.9 bits gained from a 7th word off a 7,776-word list. If a site demands a digit or symbol, add one, but don't count on it for real security.
No - word selection and the entropy calculation run locally using the browser's own random number source, and the generator doesn't transmit, log, or store the result. Refreshing or closing the page discards it, so copy the passphrase into a password manager before navigating away.
The behavioral notes were checked against the browser implementation. Standards and primary references below define the relevant format, formula, or platform behavior.
Generate strong, random passwords with customizable length, character sets, and complexity requirements.
Analyze password strength with entropy scoring, crack-time estimates, and improvement suggestions.
Create cryptographically random strings for API keys, tokens, salts, and unique identifiers.
Create QR codes for URLs, text, Wi-Fi credentials, vCards, and more with customizable size and colors.
Scan and decode QR codes from uploaded images or your device camera to extract embedded data.
Compute MD5, SHA-1, SHA-256, and SHA-512 checksums to verify file integrity and detect tampering.