Diceware Passphrase Generator
FreeGenerate secure, memorable passphrases using the diceware method.
Runs entirely in your browser. Nothing you enter is uploaded or stored.
Each additional word multiplies the search space by 7,776 (the wordlist size) — word count matters far more for security here than which words happen to be chosen.
Optional — pure word-based diceware is already strong on its own. Add these only if a service requires a number or symbol.
Words are drawn from the 7,776-word EFF long wordlist (12.92 bits per word) using the Web Crypto API (crypto.getRandomValues), with unbiased rejection sampling — never Math.random(). Nothing is generated on, or sent to, a server.
How it works
What is diceware, and how does it work?
Diceware builds a passphrase by randomly selecting whole words from a large, fixed wordlist, instead of randomly selecting individual characters. Originally this meant physically rolling dice to pick each word's number from a printed list — this tool does the same thing digitally, using cryptographically secure random selection instead of physical dice. The result is a passphrase that's both high-entropy and genuinely memorable, since "correct horse battery staple" is far easier to recall (and type) than an equivalent-strength string like "K7#mP2$vL9@x".
Why does word count matter more than which words are chosen?
Every word is drawn independently and uniformly from the same wordlist, so each word contributes exactly log₂(wordlist size) bits of entropy — which words end up chosen doesn't change that figure at all. With this tool's 7,776-word list, that's 12.92 bits per word, and each additional word multiplies the total number of possible passphrases by 7,776. Six words gives roughly 78 bits total — comparable to a long random character password — and each extra word beyond that adds a full 12.9 bits more.
Which wordlist does this tool use?
The EFF (Electronic Frontier Foundation) long wordlist — 7,776 words, licensed CC BY 4.0. It's the current best-practice diceware wordlist, designed to avoid words that are hard to spell, easily confused, or offensive. The exact wordlist size matters because the entropy math (log₂ of the list size) depends directly on it — a different list of a different size would give a different bits-per-word figure.
Is anything I generate here sent anywhere?
No. Word selection uses the Web Crypto API (crypto.getRandomValues) — the same cryptographically secure randomness source used across this toolbox's other generators — entirely in your browser. Nothing is transmitted to a server, logged, or stored.