Create memorable passphrases
Combine random words into a long passphrase that is easy to remember and hard to guess.
Passphrase generator
Pick how many words you want and your preferred separator.
Example pattern: river-aurora-rocket-coffee-zenith. Use at least 5+ words for 90+ bits entropy.
Passphrase best practices FAQ
Use 5+ random words (minimum 4). Each additional word exponentially increases security. 5 words typically provides 90+ bits of entropy, making brute-force attacks impractical for centuries.
Never. Use completely random, unrelated words. Avoid themes (like fruits: apple-banana-orange) or patterns. Random combinations like "lamp-tiger-cloud-pizza" are much harder to guess or crack.
Absolutely not. One breach compromises all accounts using the same passphrase. Generate unique passphrases for every site and store them in a password manager.
No. Use dedicated password managers (Bitwarden, 1Password, etc.) with strong encryption. Browser storage is convenient but vulnerable to malware and attacks.
Yes, always. Even perfect passphrases can be phished or stolen. 2FA/MFA adds a second factor (app, hardware key) that protects you even if your passphrase is compromised.
Yes. 5+ random words using crypto.getRandomValues() provide enterprise-grade security. Combined with 2FA, they're suitable for any high-security account including banking and corporate systems.