Password Guide

Passphrase Generator Guide

A passphrase is a longer password built from words. It can be easier to remember than a random string, but it must still be unpredictable and unique.

Passphrase and password building blocks with lock and shield
Privacy note: Do not enter real passwords into websites you do not trust. On this static site, password generation and strength estimation are designed to run in your browser, but you should still use good judgment with sensitive credentials.

Good passphrases

Good passphrases use unrelated words, sufficient length, and no personal story that others could guess. They should not be famous quotes, lyrics, slogans, or common expressions.

When to use passphrases

Passphrases are useful for master passwords and accounts you must type manually. For most website logins, random generated passwords stored in a password manager are better.

Avoid personal clues

Do not use pet names, children’s names, addresses, birthdays, favorite teams, or public social-media information. Attackers can collect personal clues.

Make it unique

A passphrase should still be unique to one account. Reusing a memorable phrase everywhere creates the same risk as reusing any other password.

FAQ

Frequently asked questions

Should I reuse one strong password?

No. A single reused password can become a master key for attackers if one service is breached.

Is length more important than symbols?

Length is usually the strongest single factor, but symbols and mixed character types can add useful entropy when the password remains random.