Diceware Password Generator

Diceware is a method of creating passphrases using real dice. Each word in the passphrase is selected by rolling a six-sided die five times, producing a number from 11111 to 66666 (6^5 = 7776 combinations). That number is looked up in a wordlist — this tool uses the EFF large wordlist — and the corresponding word becomes part of your passphrase. Because each word adds ~12.9 bits of entropy, a six-word passphrase has about 77 bits of security.

Random passphrases are both stronger and easier to remember. A passphrase like "jigsaw-inflate-cobweb-tutor" is far harder to brute-force than a typical 8-character password, yet much easier to type and recall than a random string like "k$8!vQz2". Length beats complexity when it comes to offline brute-force resistance, and diceware words are deliberately chosen to avoid common patterns.

Yes. Word selection uses crypto.getRandomValues() (the same cryptographically secure source the browser uses for TLS keys) combined with rejection sampling, which removes modulo bias. Every one of the 7,776 words is selected with exactly equal probability — the digital equivalent of rolling honest physical dice. All generation happens locally in your browser; nothing is sent to any server.

For most accounts, six words (about 77 bits of entropy) is an excellent default and what this tool recommends. For password managers or high-value accounts, use seven or eight words (90+ bits). The EFF recommends at least six words for protecting important accounts, and adding one word roughly doubles the search space. Never reuse a passphrase across sites.

Yes. Some sites enforce rules like "must contain a number" or "must contain a capital letter". Use the Capitalize option to uppercase the first letter of each word, and the Prefix a digit or Append random number options to inject digits. These add a few extra bits of entropy while keeping the phrase memorable. The separator can be changed to ".", "_", "space", or removed entirely.

The passphrase appears on screen and in your clipboard after you click Copy. Avoid storing it in plain text files, notes apps, or emails. A password manager with an encrypted vault is the safest place. This tool does not save anything — once you leave the page, the generated phrase is gone, so write it down or save it securely before navigating away.

Yes — completely free, no registration, and 100% private. The EFF wordlist is bundled into the page, and all passphrase generation runs locally in your browser using the built-in cryptographic random generator. Nothing is transmitted anywhere, and the tool keeps working offline after the page loads.