Three to ten random words you can actually remember
Runs in your browser. Nothing you type is sent anywhere. Updated on 24 Oct 2026.Random words are easier to remember and to type on a phone than a jumble of symbols, and enough of them are harder to guess than a short complex password. Words are drawn with the cryptographic random generator built into your browser, never from a pattern. Choose how many, from three to ten, pick the separator, and decide whether one word is capitalised or ends in a digit. The strength estimate updates with every change.
The page opens in Passphrase mode.
Set the Words slider between 3 and 10 words.
Pick a Separator, and turn on "Capitalise a word" or "Add a number" if a site demands them.
Click Copy to take the passphrase, or Regenerate until you get one you can remember.
This password generator creates a strong random password of 8 to 128 characters, or a passphrase of three to ten random words, and shows you how strong it is in bits and in the time it would take to crack. Pick the character types you need, drop look-alike characters such as 0, O, 1 and l, copy the result, and generate ten at once when you need a batch.
People use it when a new account demands a 16 character password with symbols, when a Wi-Fi or admin password has to be typed on another device and must not contain ambiguous characters, or when they want a diceware style passphrase they can actually remember for a password manager or disk encryption.
Use a passphrase for anything you type by hand or need to recall: a master password, a laptop login, an encryption key. Use a long random password for everything else and store it in a password manager, so each site gets its own and you never reuse one. Related tools: Password Strength Checker, Bcrypt Hash and Verify, TOTP Generator.
The rest of the article, and all 6 questions about Password Generator, are on the Password Generator page.
Yes. There is no signup, no limit on how many passwords you generate and no premium tier for longer passwords. The site is funded by a small number of ads shown below the tool, never inside it.
At least 12 characters for everyday accounts and 16 or more for email, banking and anything that resets other passwords. With all four character types, 16 characters gives about 102 bits of entropy, which is far beyond what an offline attack can search. Length matters more than symbols: a 20 character password of letters alone beats a 10 character one with symbols.
A passphrase is a password made of several random words, for example lantern-cobalt-sparrow-orbit-quilt. Five words from this list give about 57 bits of entropy and are much easier to type and remember than a string of symbols. The words must be chosen at random by the tool; a sentence you make up yourself is far weaker because people pick predictable words.
Entropy is the number of equally likely values the generator could have produced, expressed in bits. Each extra bit doubles the number of guesses an attacker needs. 40 bits falls in minutes to an offline attack, 60 bits takes years, and 80 bits or more is out of reach. The crack time shown assumes 10 billion guesses per second, which is a well-funded attacker against a fast hash.
Still stuck? Ask about Password Generator and anybody who knows can answer. No account needed.
Same job, other tools: Bcrypt Generator – Generate a bcrypt hash for a test user or a config file · OTP Generator – Time-based one-time passwords with 6 or 8 digits and a choice of algorithm.
On the related tools: SRI Hash Checker – Check whether a file still matches its integrity attribute before the browser blocks it.
In the collections Security Tools for Developers · Test Data Generators.