Adgangssætningsgenerator

A free passphrase generator that runs in your browser

This passphrase generator creates strong, memorable secrets from random words — the kind you can actually remember but a computer can't guess. Pick how many words you want, choose a separator and capitalization, and a fresh passphrase appears instantly along with a live strength meter. There's nothing to install and no account to create, and because every passphrase is generated entirely in your browser, it's never uploaded.

What is a passphrase, and why it beats a password

A passphrase is a sequence of several random words, such as correct-horse-battery-staple, used in place of a traditional password. The idea, popularised by the XKCD comic, is simple: length beats complexity. A short password full of symbols like Tr0ub4dor&3 is hard to remember yet surprisingly easy for software to crack, while four to six random words are easy to picture and far stronger.

You only have to remember a little story of words; an attacker has to guess from an astronomical number of combinations. That is what makes a memorable password and a secure one the same thing.

Diceware and the EFF wordlist

Under the hood this is a Diceware generator. Diceware builds passphrases by choosing words completely at random from a large numbered list. This tool offers two: the EFF long wordlist of 7,776 words (the gold standard, about 12.9 bits of entropy per word) and a 1,296-word short list of shorter, easier-to-type words. Crucially, the words are drawn with crypto.getRandomValues, your browser's cryptographically secure random generator — not the predictable Math.random() — so every passphrase is genuinely unpredictable.

Reading the strength meter: entropy and crack time

Strength is measured in bits of entropy: every extra bit doubles the work an attacker must do. The meter updates as you change options and shows both the bit count and an estimated crack time. As a guide, four words from the long list is about 51 bits, five is 64, six is 77 and seven is 90 bits. A six-word passphrase would take thousands of years to break even at a trillion guesses per second, which is why six random words is the widely recommended sweet spot.

Make it yours: words, separators, capitals and symbols

Tune the passphrase to fit any site's rules. Choose 3 to 12 words, join them with a hyphen, space, period, underscore, nothing, or a random digit, and switch between lowercase, Capitalised or UPPERCASE. Need a number or special character to satisfy a form? Flip on Add a number or Add a symbol — though remember that one extra word adds far more strength than a single digit. Use the Refresh list to compare several passphrases at once and copy whichever you like best.

Passphrases for work, Wi-Fi and password managers

Word-based passphrases are recommended by NIST and ideal well beyond personal logins. Use them for business and work accounts, VPNs, server and database credentials, Wi-Fi (WPA2/WPA3) keys, and especially as the master password for a password manager — the one strong secret you memorise so the manager can handle the rest. Because everything is generated locally, no passphrase ever leaves your device, which suits security- and privacy-conscious teams.

Private by design

There are no ads tracking your keystrokes and no server in the loop. Passphrases are created on your device, never transmitted and never stored — only your display preferences are remembered locally so the tool reopens the way you left it. Generate one, copy it, and close the tab with confidence.

How UtiloKit compares with Bitwarden, 1Password, and LastPass passphrase generators

Most password managers — Bitwarden, 1Password, LastPass, Dashlane, and NordPass — include a passphrase generator inside their product. The catch: you need an account, a browser extension, or a mobile app installed before you can use them. Bitwarden's is free but requires a login; 1Password's is locked to paid subscribers; LastPass restricts free users significantly after their 2021 policy changes.

UtiloKit's passphrase generator runs in any browser with zero sign-up and nothing to install. It adds features missing in most password manager generators: a live entropy meter with exact bit count, crack-time estimates under three distinct attack models, choice between the EFF long and short wordlists, custom separators, optional digit and symbol appending, and all of it working fully offline once the page loads. If you want a quick passphrase without logging into a password manager — because you're on a new machine, helping someone else, or setting up the manager itself — this is the faster option.

The mathematics of entropy: why bit count is the only honest measure of password strength

Passphrase strength is calculated with a precise formula: entropy = log₂(Wⁿ) bits, where W is the wordlist size and n is the number of words. With the EFF long wordlist of 7,776 words, each word independently contributes log₂(7,776) = 12.9 bits of entropy. A five-word passphrase therefore holds 64.6 bits, and a six-word passphrase holds 77.5 bits. These numbers compound: every additional word doubles and then doubles again the number of possible passphrases an attacker must search.

To understand why bits matter, consider the target thresholds. 128 bits of entropy is broadly considered computationally infeasible to brute-force against even nation-state adversaries with current hardware — a ten-word EFF passphrase clears that bar. The gap between appearance and reality is most visible in common passwords: P@ssw0rd! looks complex but is generated by highly predictable human substitution patterns (letters to digits, appended symbols), which attackers model explicitly. When those patterns are accounted for, that password carries roughly 18 bits of effective entropy — weaker than two randomly chosen words. Entropy calculated from the actual search space, not from character-set arithmetic, is the only figure worth trusting.

This is why credential hygiene advice has shifted away from complexity rules. Character-set diversity inflates a theoretical entropy number while doing little against an attacker who already knows humans swap 'a' for '@' and 'o' for '0'. True randomness — generated by a cryptographic source, not chosen by a person — is what the bit count actually measures, and what makes passphrases from a generator genuinely stronger than passwords invented by hand.

Diceware and physical randomness: the gold standard before software

The Diceware method was invented by Arnold Reinhold in 1995 as a way to generate strong passphrases with zero software trust required. The procedure is simple: roll five six-sided dice, read the five-digit result (for example, 4-3-2-6-1 → 43261), and look that number up in a published 7,776-word list. The wordlist has exactly 7,776 entries because 6⁵ = 7,776, meaning every possible five-dice combination maps to exactly one word. Repeat for each word in the passphrase.

Physical dice have a compelling security property that software cannot fully replicate: the randomness is genuinely unpredictable and verifiable by the user without auditing any code. If you roll casino-grade dice in a cup, no malware, no compromised browser, and no backdoored random-number generator can influence the result. Combined with a printed wordlist, the process is completely air-gapped — suitable for generating encryption keys and master passwords in environments where trusting any piece of software is unacceptable.

In 2016, the Electronic Frontier Foundation updated the original Reinhold wordlist to remove obscure, offensive, and hard-to-spell words, producing the EFF long list of 7,776 friendlier words — the same list this tool uses. The EFF also released two shorter companion lists: a four-dice list (1,296 words, 10.3 bits each) and a five-dice list (7,776 short words optimised for memorability). For most people, a software generator drawing from crypto.getRandomValues is an acceptable and far more convenient equivalent to physical dice; but when the stakes are highest — a key that protects years of encrypted data — the dice-and-printed-list method remains the unconditional gold standard.

How password crackers actually attack passphrases

Modern password cracking is not the slow one-at-a-time guessing of film fiction. A single consumer GPU can test more than 100 billion SHA-256 hashes per second against a leaked password database, and purpose-built cracking rigs are far faster. Attackers layer several attack strategies in sequence: a pure dictionary attack tries every known word and leaked password; a hybrid attack appends numbers and symbols to dictionary words (catching password1! and Summer2024#); a Markov chain attack builds a probability model of character sequences from billions of previously cracked passwords and generates statistically likely candidates, catching patterns humans think are unpredictable.

Rainbow table attacks use precomputed hash-to-password lookup tables to reverse hashes instantly — defeated by salting (mixing a random value into each hash before storage), which is why any modern authentication system uses salted hashes. None of these techniques, however, efficiently attack a true multi-word passphrase. Against a five-word EFF passphrase, an attacker who knows it came from the 7,776-word list must search 7,776⁵ = 2.8 × 10¹⁹ combinations. At 100 billion guesses per second — already an extremely well-resourced attack — exhausting that space would take roughly 8,900 years.

The critical qualifier is random. If words are chosen by a person rather than a generator, they are not uniformly distributed across the wordlist. People gravitate toward short, common, emotionally significant words, and attackers model this by weighting their guesses accordingly. A passphrase of five words that a human invented might have effective entropy equivalent to only two or three random words. The reason to use a generator — and to trust its source of randomness — is to ensure the full mathematical entropy the formula promises is actually present in the passphrase.

Password manager integration, master passphrases, and when passwords aren't enough

A passphrase and a password manager are complementary, not competing, tools. The workflow is straightforward: use this generator to create a six- or seven-word passphrase, memorise it, and set it as the master password for KeePass, Bitwarden, 1Password, or your manager of choice. The manager then stores a unique random password for every site you use, so a breach of one service exposes nothing else. The master passphrase is the single secret you hold in memory; it must be strong enough to resist offline cracking if your encrypted vault is ever stolen — exactly the use case a high-entropy passphrase is designed for.

The most catastrophic risk in this model is credential stuffing: attackers take username/password pairs leaked from one breached service and try them automatically across hundreds of others. Password reuse is what makes stuffing effective — a unique password per site eliminates the risk entirely, which is why a manager is so important alongside a strong master passphrase. Bitwarden's zero-knowledge architecture means the company never sees your vault contents; even if their servers are compromised, an attacker obtains only an encrypted blob that can only be decrypted with your master passphrase. That is why the master passphrase entropy matters so much: it is the last line of defence.

Even a perfect passphrase has limits. Phishing attacks — fake login pages that capture whatever you type — succeed regardless of passphrase strength. Time-based one-time passwords (TOTP, the six-digit codes from authenticator apps) add a second layer, but TOTP codes can themselves be intercepted in real time by a sophisticated phishing kit. The genuinely phishing-resistant alternative is a FIDO2 hardware security key such as a YubiKey, which performs a cryptographic challenge tied to the real domain name and will refuse to authenticate to an impostor site. The NIST SP 800-63B guidelines (updated 2024) explicitly recommend passphrases over character-complexity rules, discourage mandatory periodic password rotation, and endorse phishing-resistant authenticators — a policy shift that validates what security practitioners have known for years: memorable high-entropy passphrases combined with strong second factors are the most practical path to genuine account security.