How to Generate Secure Passphrases
Passphrases are easier to remember than random passwords while being equally secure. Learn how to generate strong, memorable passphrases.
Key Takeaways
- A password like `X#9kL!2m` is hard to remember.
- Diceware uses physical dice to select words from a list of 7,776 words.
- Using separators (hyphens, spaces, dots) between words adds minimal entropy but greatly improves readability.
- Don't choose words yourself — human choices are predictable.
Password Generator
Generate strong, random passwords
Passwords vs Passphrases
A password like X#9kL!2m is hard to remember. A passphrase like correct-horse-battery-staple is easy to remember and actually harder to crack due to its length. Entropy depends on length and randomness, not complexity.
Diceware Method
Diceware uses physical dice to select words from a list of 7,776 words. Each word adds ~12.9 bits of entropy. A 6-word passphrase has ~77 bits of entropy — comparable to a random 12-character password.
Recommended Length
| Words | Entropy | Crack Time (1T guesses/sec) |
|---|---|---|
| 4 | ~51 bits | Days |
| 5 | ~64 bits | Years |
| 6 | ~77 bits | Centuries |
| 7 | ~90 bits | Heat death of universe |
Word Separator
Using separators (hyphens, spaces, dots) between words adds minimal entropy but greatly improves readability. Some systems require special characters — adding one number and one symbol to a passphrase satisfies complexity requirements.
Avoiding Patterns
Don't choose words yourself — human choices are predictable. Use a cryptographically secure random generator. Avoid song lyrics, book quotes, and common phrases.
Verwandte Tools
Verwandte Anleitungen
How to Check if Your Password Has Been Compromised
Data breaches expose millions of passwords regularly. Learn how to check whether your credentials have been leaked without risking further exposure, using k-anonymity-based services and local hash comparison.
Password Managers Compared: Features That Matter
A password manager is the single most impactful security tool for most people. This comparison covers the key features to evaluate when choosing a password manager for personal or team use.
How to Strip EXIF Metadata From Photos for Privacy
Photos contain hidden metadata including GPS coordinates, device info, and timestamps. Before sharing photos online, learn how to remove this data to protect your privacy and prevent location tracking.
Encryption Best Practices for Personal Data
Encryption protects your data from unauthorized access, whether stored on your devices or transmitted over the internet. This guide covers practical encryption strategies for personal data protection.
Troubleshooting SSL/TLS Certificate Errors
SSL/TLS certificate errors prevent secure connections and scare away visitors. This guide explains common certificate warnings, their causes, and step-by-step fixes for website operators and visitors.