Memorable, not cryptic
Real words are easy to remember and effortless to type, even on a phone. The strength comes from length and randomness, not from hard-to-read special characters.
Free tool
Password Generator
Four random words, each with a digit: long enough to cost an attacker decades, and simple enough to remember. Generated entirely in your browser.
FormatWord7-Word2-Word7-Word9
Your new password
Generated locally in your browserCurrent password:
Strength
Strong
The recommended format: strong and still easy to remember.
- Entropy
- 65 bits
- Combinations
- 3.6 × 1019
- Time to guess*
- about 57 years
* Average time for an attacker who knows the method and the word list and manages 10 billion guesses per second, for example against a stolen password database. Through a login form that locks after failed attempts, only a tiny fraction of that is possible.
Choice
More suggestions
Not your favourite? Tap a suggestion to use it, or copy it directly.
Anatomy
How your password is built
The strength does not come from special characters but from true randomness and length. Each block adds about 16 bits, and every additional block multiplies an attacker’s effort by 77,400.
Wordone of 7,740 words from the EFF list
7one of 10 digits
77,400variants per block, about 16.2 bits
× 4blocks, your chosen number of words
65 bitsentropy of your password
Background
Why this format
True randomness
Every word and every digit is drawn by your browser’s cryptographic random number generator, strictly uniform across 7,740 words. There are no patterns and no favoured words.
Nothing leaves your device
The password is created entirely in your browser. It is neither sent to us nor stored, and the page sets no cookies.
In practice
Four rules that really matter
One password per account
If one service is breached, all your other accounts stay safe. Reused passwords are one of the most common ways in.
Use a password manager
Then you only need to remember a single password. A password from this page with six or more words is a good fit for it.
Turn on two-factor sign-in
A second factor protects your account even if a password does end up in the wrong hands.
Never share it by email
Legitimate providers never ask for your password by email, phone or chat. Anyone who asks wants to steal it.
Word list: EFF Large Wordlist by the Electronic Frontier Foundation, licensed under CC BY 3.0 US. Removed: the four hyphenated entries, so the hyphen works unambiguously as a separator, and 32 brand and product names.