Passphrase Generator
Random, memorable passphrases made on your device from the 7,776-word EFF list. Strong enough for a master password, easy enough to type.
Password generator
Strong · 81 bits of randomness
Cracking it would take a super-fast attacker about 350 thousand years.
- Never leaves your device
- Works offline
- No sign-up
- Free & unlimited
What is a passphrase?
A passphrase is a password made of several random words, like Tactful-Stress-Gloater-Scorebook-Backwash-Alienable.
It’s long, so it’s very hard to guess — but words are easy to type and remember, unlike k7#Vq-2Lm@9x.
Like you’re 6: instead of one tiny secret scribble, you make a long, silly sentence that only you know.
Each word makes it 7,776× harder to guess
Every word adds about 12.9 bits of randomness. Here’s what that means for a fast attacker.
| Words | Bits | Strength | Time to crack |
|---|---|---|---|
| 4 words | 52 | Fair | about 5.1 hours |
| 5 words | 65 | Good | about 4.5 years |
| 6 words Good start | 78 | Good | about 35 thousand years |
| 7 words | 90 | Strong | about 272 million years |
| 8 words | 103 | Strong | longer than the universe has existed |
Assumes 100 billion guesses per second against a stolen password file. Capital letters, separators and the trailing number are extras you can’t count on — the words do the work.
Three tricks to remember a passphrase
-
Picture a silly story
“Tactful stress, gloater, scorebook…” — imagine them doing something ridiculous together. Weird pictures stick.
-
Type it a few times
After 3–4 typings your fingers remember it. Keep it written down in your password manager until then.
-
Never pick the words yourself
Humans choose predictable words. Let the dice choose; if you dislike a phrase, press “New password” — don’t swap words.
Great for
- Your password-manager master password
- Wi-Fi networks and disk encryption
- Anything you must type on a TV or phone
Not ideal for
- Sites that cap passwords at ~12–16 characters
- Accounts you keep in a manager anyway — use a random password there
Passphrase questions, answered
What is a passphrase?
A passphrase is a password made of several random words, such as “Tactful-Stress-Gloater-Scorebook-Backwash-Alienable”. It is long enough to be very hard to guess but far easier to type and remember than a jumble of symbols.
How many words should a passphrase have?
Use at least 6 random words (about 77 bits) for important accounts, and 7–8 for a password-manager master password or disk encryption. Each extra word multiplies the guesses needed by 7,776.
Is a passphrase safer than a password?
Per character, a random jumble is stronger. But passphrases are long, so a 6-word passphrase is about as strong as a 12-character random password — and much easier to type and remember. Use passphrases for things you type by hand and random passwords for everything stored in a manager.
Where does Boltipass get its words?
From the Electronic Frontier Foundation’s Long Wordlist: 7,776 easy-to-recognise English words chosen so that each word adds about 12.9 bits of randomness. Words are picked with your browser’s secure random generator, on your device.
Is the passphrase sent anywhere?
No. It is made in your browser and never sent to a server. You can switch on airplane mode and it still works.