DigiKitPassphrase Generator
Generate memorable, hard-to-guess word-based passphrases.
Passphrase Generator makes this small but important security step practical to actually do. Passphrase Generator lets you do this quickly and safely without relying on anything else. The whole process happens locally in your browser; nothing is sent to a server.
Step-by-step
- Choose how many words you want in Word count (2-8). For anything important, pick at least 5 rather than the minimum of 2.
- Pick the character that goes between words under Separator: hyphen (-), underscore (_) or dot (.).
- Click Run.
- If the result is awkward or hard to remember, run it again for a fresh combination, then save it wherever you will use it.
Example
You need a master password for your password manager, something you will type by hand every day but nobody could guess. Set the word count to 6, choose the hyphen and run it. You get six unrelated words joined together. Picturing them as one odd scene helps the phrase stick during the first few days. On a phone it is also easier to type than a string full of symbols and mixed case, so typos are less likely.
Passphrase logic: strength comes from word count
Passwords made from randomly chosen words (as in the Diceware method) are both strong and memorable. Each random word picked from a list of 7,776 adds about 12.9 bits of uncertainty, so 6 words come to about 77 bits. Real strength depends on the size of the word list and on the choice being random; every added word multiplies the difficulty.
| Word count | Rough use |
|---|---|
| 2-3 | Low-value, short-lived use |
| 4 | Minimum for everyday accounts |
| 5-6 | Password-manager master password, email |
| 7-8 | Very critical uses such as encryption keys |
Memory techniques
- Join the words into one picture; the stranger it is, the longer it sticks.
- Type the passphrase often in the first days so muscle memory helps.
- Always use the same separator; forgetting which one you chose is a common mistake.
Do not swap the generated words for your own; randomness is the source of the security.
Things to keep in mind
- A passphrase is strong because the words are picked at random. Swapping them for words that form a sensible sentence makes it easier to guess.
- Some sites cap password length or reject certain symbols. If you get an error, try another separator or fewer words.
- When a site insists on digits and capitals, adding a number at the end and capitalizing the first word usually satisfies the rule.
- If you write your master passphrase on paper, keep it somewhere safe at home, not in the same bag as your laptop.