🎲 Diceware Passphrase Generator
Generate memorable, uncrackable passphrases using real Diceware words or phonetic pronounceable syllables with live entropy calculations.
Why Diceware Outperforms Complex Passwords
Traditional passwords like Tr0ub4dor&3 are hard for humans to remember, forcing users to write them down or reuse them. Meanwhile, password-cracking algorithms (like Hashcat) specifically optimize for common character substitutions (such as replacing 'o' with '0' or 'a' with '@').
Selecting 5 random words from a 7,776 wordlist gives 64.6 bits of raw entropy ($7776^5 \approx 2.8 \times 10^19$ combinations), exceeding the security of typical 10-character complex passwords.
Because words are selected with cryptographic independence, knowing one word gives zero statistical clues about the adjacent words in the sequence.
Pronounceable syllable mode creates words that you can easily read over the phone without spelling out ambiguity like uppercase 'I' vs lowercase 'l'.
Frequently asked questions
What is the Diceware method?
Diceware is a cryptographic method for generating memorable, high-entropy passphrases by rolling physical or simulated dice to select words from a large curated wordlist, such as the Electronic Frontier Foundation (EFF) list.
Why are passphrases better than random character passwords?
NIST (National Institute of Standards and Technology) guidelines recommend passphrases because human brains easily memorize sequences of common words (like 'correct-horse-battery-staple'), while automated brute-force attacks struggle against the massive mathematical combinatorial space.
How is the entropy score calculated?
Information entropy is computed using Shannon's formula H = L * log2(N), where L is the number of words selected and N is the wordlist dictionary size. Additional entropy is credited when symbols, digits, and capitalization are applied.
Are my passphrases sent to any server?
No. The wordlist is bundled directly in your browser's static JavaScript, and random word selection uses window.crypto.getRandomValues entirely client-side. Nothing is transmitted or saved.
What is a pronounceable syllable passphrase?
Pronounceable passphrases use Consonant-Vowel-Consonant (CVC) phonetic clusters (like 'bap-mor-tuv'). They provide strong entropy while remaining easy to read aloud over the phone or communicate verbally.