Memorable, not cryptic
Real words are easy to remember and easy to type, even on a phone. The strength comes from length and randomness, not from special characters that are hard to read.
Free tool
Password Generator
Four random words, each with a digit: long enough to cost an attacker decades, and simple enough to remember. The password is created entirely in your browser, and nothing is sent to me.
FormatWord7-Word2-Word7-Word9
Your new password
Created locally in your browserCurrent password:
Strength
Strong
The recommended format: strong and still easy to remember.
- Entropy
- 65 bits
- Combinations
- 3.6 × 1019
- Time to guess*
- about 57 years
* Average time for an attacker who knows the scheme and the word list and manages 10 billion guesses per second, for example against a stolen password database. Through a login form that locks after failed attempts, only a tiny fraction of that is possible.
Choice
More suggestions
Not your favorite? Tap a suggestion to use it, or copy it directly.
Anatomy
How your password is built
The strength does not come from special characters, it comes from true randomness and length. Every block adds about 16 bits, and every additional block multiplies an attacker’s effort by 77,400.
Wordone word out of 7,740 on the EFF list
7one digit out of 10
77,400variants per block, about 16.2 bits
× 4blocks, the number of words you picked
65 bitsentropy of your password
Background
Why this format
True randomness
Every word and every digit is drawn by your browser’s cryptographic random number generator, strictly uniform across 7,740 words. There are no patterns and no favored words.
Nothing leaves your device
The password is created entirely in your browser. It is neither sent to me nor stored, and the page sets no cookies.
In practice
Four rules that really matter
One password per account
If one service gets breached, all your other accounts stay safe. Reused passwords are one of the most common ways in.
Use a password manager
Then you only need to remember a single password. A password from this page with six or more words is a good fit for it.
Turn on two-factor sign-in
A second factor protects your account even if a password ends up in the wrong hands after all.
Never share it by email
Legitimate providers never ask for your password by email, phone, or chat. Whoever asks for it wants to steal it.
Word list: EFF Large Wordlist by the Electronic Frontier Foundation, licensed under CC BY 3.0 US. The four hyphenated entries were removed so the hyphen works as an unambiguous separator, along with 32 brand and product names.