Diceware Passphrase Generator
Generate secure, easy-to-remember passphrases by combining random words. 100% in your browser.
No artificial ceiling: go up to 30 words if you want an extreme security margin.
Each word is chosen with crypto.getRandomValues (the browser's cryptographic random generator, not Math.random), from a curated list of 2048 standard English words. Nothing is generated or stored on any server.
Built by
Miguel Ángel Colorado Marin (MACM)
Built by
Miguel Ángel Colorado Marin (MACM)
Full-Stack Developer · Guadalajara, España
I develop web apps, digital tools and full projects — from design to deployment.
The Diceware method generates passwords by combining several words chosen at random from a fixed list, instead of an unreadable mix of symbols — the result is much easier to remember and type, and with enough words it's also harder to guess by brute force. This tool picks each word with crypto.getRandomValues (the browser's cryptographically secure random generator, never Math.random) from a curated list of 2048 standard English words, with no ambiguous or offensive entries. Adjust how many words you want (more words = more entropy = more secure), the separator between them, whether each one starts with a capital letter, and whether to add a digit at the end. The estimated entropy in bits is calculated in real time so you know exactly how much brute-force resistance your passphrase has.
Features
- ✓Cryptographic randomness (crypto.getRandomValues)
- ✓Curated 2048-word English list
- ✓Configurable 3 to 10 words
- ✓Real-time estimated entropy
- ✓100% in browser, no uploads
How to generate a Diceware passphrase?
- 1
Choose the number of words
More words = more entropy. 6 is a good starting point for general use.
- 2
Customize the format
Separator, capitalization and whether to add a digit.
- 3
Generate and check the entropy
The estimated bit count tells you how long it would take to guess by brute force.
- 4
Copy it and store it in a password manager
Don't reuse it across multiple sites.
Frequently asked questions
Is my passphrase generated or stored on any server?
No. It's generated with crypto.getRandomValues directly in your browser, it's never sent or stored anywhere.
How many words do I need to be secure?
6 words give about 66 bits of entropy, enough for the vast majority of uses. For very critical accounts, 8 or more words give a much larger margin.
Why use words instead of random symbols?
At equal entropy, a sequence of words is much easier to memorize and type without mistakes than a string of random symbols.
Where does the word list come from?
It's the standard English BIP-39 wordlist (2048 words), widely audited and specifically designed to avoid ambiguous, similar-sounding or inappropriate words.
Related tools
Embed Diceware Passphrase Generator on your site
Add Diceware Passphrase Generator to any web page with a simple iframe. Free, with attribution to miguelacm.es.
<iframe
src="https://miguelacm.es/embed/diceware-generator"
width="100%"
height="700"
frameborder="0"
title="Diceware Passphrase Generator — miguelacm.es"
></iframe>