Passphrase generator
Create a strong password you can actually remember — several random words joined together. Generated with crypto-grade randomness right in your browser; nothing is uploaded.
This on-page demo uses a compact word list. The full PassBloom passphrase tool uses a larger list and shows a detailed strength meter.
Open the full passphrase tool →
What is a passphrase?
A passphrase is a password built from several unrelated words — like amber-harbor-vivid-otter — instead of a short string of mixed symbols. It draws its strength from length rather than obscurity, which makes it both easier for you to remember and harder for a computer to guess. The idea was popularised by "diceware", where words are chosen at random from a numbered list.
Why passphrases beat "complex" passwords
Password strength is measured in entropy — the number of equally likely possibilities, expressed in bits. Every extra bit doubles the guessing effort. A short password like P@ss1! looks complex but has surprisingly low entropy because it is short and follows predictable patterns attackers already know. Four truly random words from a list of a few thousand give roughly 50 bits; five or six words push past 60–77 bits, which resists offline cracking while staying memorable. Length is the single biggest lever.
How many words do you need?
Four random words is a sensible minimum for everyday accounts. Use five or six for important logins — email, banking, your password manager's master password — where a longer, unguessable phrase matters most. Adding a capital letter and a number lifts entropy a little more and satisfies sites that demand mixed character types, without hurting memorability.
Using a passphrase safely
Keep passphrases unique per site — reusing even a strong one means a single breach exposes every account. A password manager is the easiest way to store dozens of them; your one memorable master passphrase then protects the rest. Never share a passphrase over chat or email, and generate it on a device you trust. Because PassBloom runs entirely in your browser with your device's secure random generator, nothing you create here is transmitted or stored.