#




copyable text with spaces or dashes



entropy stats

There are words in your password, which is ~ bits of entropy (~12.92 bits/word and ~5.16/symbol). That many words equates to an effective keyspace of ~ possible keys ((7776^words)/2 which is 50% of the total key space since on average a key will be found in that reduced keyspace). Conservatively assuming an adversary can guess passwords at the rate of a trillion () keys/second, as Edward Snowden claims, an exhaustive brute-force search on half the total keyspace might take:

~ seconds

~ minutes

~ hours

~ days

~ years

~ x avg. lifespan

~ millenia

~ x age Universe

Learn more about calculating entropy

Frequently Asked Questions

How do I use it?

Click on one of the numbered passphrase generator buttons above. Click again to generate a totally new passphrase.

The + Word or + Symbol buttons will enhance the strength of the existing passphrase.

For extra security you can manually roll physical dice (two or five die rolls for each symbol or word respectively) and enter the results to add a word to your passphrase.

Each word or symbol displayed is shown with the index number that was used to look it up in the diceware word list.

You can copy the generated passphrase from the copyable string on the page. You should store it somewhere safe and secure. You might want to write it down and refer to the written version until you can remember it.

Close your browser window once you're done so others can't discover your passphrase.

Does this application send any data to the server?

No! Once the initial page is loaded as static files everything is done locally in your browser. None of the generated password information is sent anywhere. In fact, once you load this application in your browser you can turn off your network connection and it should work just fine.

Where is the code for this application being served from?

The entire application is just HTML, JavaScript and CSS. There is no server side component and no database. All of the JavaScript and other assets are versioned in the repository and no code is served from outside of the repository.