Generate a memorable 4-word passphrase
Generate EFF-diceware-style passphrases: 4 random words, roughly 52 bits of entropy, easy to remember, hard to crack.
Generate a memorable 4-word passphrase
Diceware — randomly selecting words from a large curated list — is the most memorable way to reach high password entropy. Four random EFF-list words give you ~52 bits, which beats most 10-character random passwords and is dramatically easier to recall. The XKCD "correct horse battery staple" method in practice. This preset generates fresh passphrases on each click, using the browser's cryptographic PRNG for word selection.
What is Generate a memorable 4-word passphrase?
Generate cryptographically strong passwords that respect your specific requirements: length, character classes (lowercase, uppercase, digits, symbols), and whether to exclude ambiguous characters (like O and 0). Uses the browser's Web Crypto API (crypto.getRandomValues), not Math.random — so the output is genuinely unpredictable, not just pseudo-random. Generate multiple at once for a whole rotation.
How do I use Generate a memorable 4-word passphrase?
- Set the length (12-64 recommended).
- Toggle character classes: lowercase, uppercase, digits, symbols.
- Click Generate for a fresh password.
- Copy or download the output.
Generate a memorable 4-word passphrase by the numbers
- RNG
- crypto.getRandomValues()
- Length range
- 4–128 characters
- Character classes
- Upper, lower, digits, symbols, ambiguous exclusion
- Entropy meter
- Live zxcvbn score
- Storage
- None — in-memory only
Common use cases for Generate a memorable 4-word passphrase
- Generating a 20-character Wi-Fi password for a small-office router.
- Creating a unique password per site for use in a password manager.
- Producing a memorable 5-word diceware passphrase for a master password.
- Spinning up 50 user seeds for a staging database.
- Getting a numeric PIN of exact length for a device lock.
Common pitfalls and how to avoid them
- Same password appears twice — Each click produces a fresh generation. If you see duplicates, you copied the old buffer — click Regenerate and copy again.
- Site rejects the password — Check the site's allowed characters. Toggle off symbols (or specific ones) to match their policy.
- Forgot the password after closing — We never store passwords. Paste into a password manager (1Password, Bitwarden, KeePass) before leaving the page.
When should I use Generate a memorable 4-word passphrase?
Password Generator is for creating new passwords. To check the strength of an existing password, use Password Strength. For hashing rather than generating, use Hash Generator.
Is a passphrase weaker than a random string?
Per character, yes. Per memory load, no. A 4-word passphrase (~52 bits) roughly matches a 9-character random mixed password, but is vastly easier to remember.
Can I add capitalisation or digits?
Sites that require "at least one digit" usually accept adding one at the end (e.g. horse-battery-staple-correct7). Entropy barely changes.
Is my file uploaded anywhere?
No. Everything runs in your browser — the file never leaves your device, and there is no server component for this tool.