Diceware Passphrase Generator

Diceware is a method of picking a passphrase by rolling physical dice and looking up each result in a pre-defined word list. It produces strong, memorable passwords whose entropy is exactly len × log2(wordlist size).

The ability to carry it in your head and to say it out loud. Four or six ordinary words can be memorized in a way that "K7#mQ2vX" cannot, typed on a phone keyboard without hunting for symbols, and read to a colleague over the phone without spelling every character. The strength is not a sacrifice: entropy comes from how many words the list has and how many you draw, so a six-word passphrase from a large list is around the strength of a twelve-character random password. Where a random password still wins is a field with a strict length cap — some sites still refuse anything over sixteen characters, and there a passphrase does not fit.

6 words ≈ 66 bits — out of reach for any current adversary. 7 words ≈ 77 bits for sensitive accounts. 8 words ≈ 88 bits for master keys and recovery phrases.

Yes. BIP-39 is the curated 2048-word list used by Bitcoin wallets for seed phrases — every word is short, distinct in the first 4 letters, and easy to spell.

Only when a site insists. A six-word passphrase already carries more entropy than any of these policies were designed to demand, and adding "1!" contributes almost nothing because it is the first thing an attacker appends too — the pattern is so universal that cracking tools generate it automatically from every dictionary word. If a form rejects your passphrase, the honest fix is to satisfy the rule with as little damage as possible: put the required character somewhere you will remember rather than at the end, and do not shorten the phrase to make room. A shorter phrase with a symbol is weaker than a longer one without.

Yes — humans remember word sequences far better than character strings. After typing "river coffee window plant" ten times, it sticks. Stories or absurd images help.