A passphrase strings together several random, unrelated words — like "river-tiger-lantern-42" — instead of a single complex password. This approach, popularized by the XKCD comic "correct horse battery staple," produces something that's often both easier to remember and harder to crack than a shorter, more complex-looking password.

• Choose how many words you want (3-8).
• Pick a separator character (hyphen, underscore, dot, or space).
• Optionally add a random number at the end.
• Click "Generate Passphrase" and copy the result.

Password strength comes down to how many possible combinations an attacker would have to try. A short, complex-looking password like "P@ss1!" has surprisingly few possible combinations despite looking complicated. A four-word random passphrase drawn from a large word list has vastly more possible combinations — while also being easier for a human to actually remember and type correctly.

Passphrases work well for accounts you need to type manually and remember, like a device unlock code or a password manager's master password. For accounts where you'll copy-paste from a password manager anyway, a fully random generated password (see our Password Generator) can be shorter and just as secure, since you never need to memorize it.

Is this passphrase truly random?
Yes, each word is selected using a cryptographically secure random number generator, and the resulting combination is not predictable.

Is my generated passphrase stored anywhere?
No, it's generated fresh on each request and not logged or saved on our servers.

Should I add the random number?
Adding a number increases the total possible combinations and satisfies password policies that require at least one digit, without significantly hurting memorability.