Free tool · Scarlet Beast En español →
Make a passphrase: a few random words instead of a password
A passphrase is a password made of several random words, like “panoramic nectar precut smith banana handclap” (EFF’s own example; do not use that one). It is long, which makes it hard to guess, and it is words, which makes it possible to remember. This page picks the words at random from a public list of 7,776 made by the Electronic Frontier Foundation (EFF), or looks up the words for real dice that you roll. No sign-up, and nothing made here is kept or sent.
Private by design. The words are picked on this device, by your own browser. The passphrase is not kept, not sent to us or to anyone, and is gone when you close the page. This page never asks for a password you already use: do not type one here, or into any page like this one. This page runs no analytics or tracking. How we handle privacy.
Good to know
What the people who study this say
- CISA, the U.S. cybersecurity agency, gives three tips for a strong password: make it long (“at least 16 characters”), make it random, and make it unique (“a different strong password for each account”).
- One of CISA’s two ways to make it random is “a memorable phrase of 4 – 7 unrelated words”, which it calls a passphrase.
- EFF says: “For most applications, we suggest making a six-word passphrase.”
- EFF says a six-word phrase from its list is one of 221073919720733357899776 that could have come up, which it calls about 2 to the power of 77.
- This is what the two pages said when they were read for this page on October 13, 2026. CISA’s page now carries a notice that it is archived and may not reflect current policy.
Where a passphrase helps most
- The one password that opens the others. A password manager is a program that makes and keeps a different password for each account. CISA says that with one, “we only need to remember one strong password”: the one for the manager itself. EFF names unlocking a password manager as an especially good use for a passphrase.
- CISA says some password managers are free, like the ones built into web browsers.
- One phrase, one use. EFF says a passphrase “should only be used for a single purpose”, and not for more than one online account. If a phrase used in two places leaks from one of them, it opens the other.
- A second lock. CISA says to turn on multifactor authentication (a code or a fingerprint as well as the password), “especially for your email, social media accounts and financial accounts”.
Remembering it and keeping it
- Make a story. EFF’s directions say to come up with a story, scene or sentence that brings back your words in their order.
- Paper is allowed. EFF says some people prefer to have the passphrase written down, especially while first memorizing it, kept in a safe place and not in the same place as the thing it protects.
- Clear it when you are done. While the phrase is on this screen, anyone who can see the screen can read it. “Copy” puts it on the device’s clipboard, where another app, or the next person to use the device, may be able to paste it; some devices keep a history of what was copied.
- A phrase that someone asks you for is a warning sign. If a call, text or email asks for your password, Is this a scam? can help you think it through.
Where the words come from
- EFF Dice-Generated Passphrases on eff.org: EFF’s directions for making a passphrase with five dice. EFF names Joseph Bonneau as the creator of its word lists.
- EFF’s Long Wordlist: 7,776 English words, one for every way five dice can fall. Every word this page shows is from this file.
- EFF’s copyright page says its original material may be freely distributed under the Creative Commons Attribution 4.0 International License. The list is used here under that license; EFF has not looked at this page and does not endorse it.
- Use Strong Passwords on cisa.gov.
- The list was fetched on October 13, 2026. Each time this page is built, a program checks that the file has 7,776 lines, that every five-dice roll from 11111 to 66666 is there once and in order, that no word is there twice, and that the roll 43463 gives “panoramic”, as EFF’s own directions say. No word was typed, removed or changed by us.
- The words are English, and this page does not translate them.
What this page can’t do
- It cannot tell you whether a password you have is strong. It has no box for that, on purpose.
- It cannot remember your passphrase. It keeps nothing. If you lose the phrase, we cannot give it back, because we never had it.
- It does not know a site’s rules. Some sites limit length, refuse spaces, or insist on a capital, a number or a symbol. The switches above are for those.
- When the page picks, it relies on your browser. It uses the browser’s random numbers made for security (not the ordinary kind), and every word has the same chance. We cannot inspect your browser or your device. If a device has a virus or a spying program on it, what is made on it may not stay private. Real dice and EFF’s own list need no trust in this page at all.
- It says nothing about how long a phrase would take to guess. That depends on things this page cannot know. It only counts how many phrases could have come up.
- Some words may be ones you do not like. Press “Make another”. Picking words yourself, or swapping one for a favorite, makes the phrase less random.
- It is not a password manager, and it is not advice from a security professional.
- It was tried by a program in one browser, with a mouse and a keyboard. It has not been tried on a touch screen or with a screen reader.
Pages that go with this
- Sign-in practice: a pretend account to learn signing in, passwords and codes on, where nothing is real.
- Is this a scam?: for the call, text or message that asks for something.
- When someone is using your name: what to do, step by step.
- Pick for us: dice on the screen, a coin, a name out of a hat.
- All the free tools, and how to save them on your phone.
A tool, and nothing more. This page picks words. It cannot make an account safe by itself, and it is not professional security advice. If someone is getting into your accounts, watching your phone, or using passwords to control you, that is not your fault: Get help now lists people to call. If things are so heavy that you are thinking about ending your life, call or text 988 (in the U.S.). If anyone is in danger, call 911.
The tool and the wording on this page were written with AI (Claude) for Scarlet Beast (our AI policy). There is no AI inside this tool: the words are picked by chance, not by a model. The words are from EFF’s Long Wordlist, by the Electronic Frontier Foundation, used under the Creative Commons Attribution 4.0 International License and taken by a program from EFF’s file on October 13, 2026; what this page says CISA and EFF say was read the same day on the pages named above. Scarlet Beast has no tie to EFF or to CISA. It has been checked by a program, with a mouse and a keyboard in one browser; no person has read it through yet, and the Spanish of the page has not been read by a native speaker. It keeps nothing, so it has no line on My data on this device. Also in Spanish: Crear una frase de contraseña. Found a mistake? Email [email protected].