Passphrase Generator

A passphrase assembled from words a person deliberately picks — a favourite band, a childhood street, a pet's name — draws from an effectively tiny pool of choices any attacker familiar with common patterns would try first, and human-generated "randomness" reliably clusters around predictable, memorable choices rather than genuinely spreading across the full space of possible words. A passphrase built from words chosen by a cryptographically secure random process instead draws each word independently and uniformly from a large word list, with no pattern for an attacker to exploit — the strength comes entirely from the size of the list and the number of words chosen, not from how clever or obscure the phrase sounds to a human ear.

Four words drawn randomly from a list of a few thousand common words already produces roughly 52 bits of entropy — comparable to a reasonably strong random password — while remaining something a person can actually read aloud, type on a phone keyboard, or recall after a few uses, which a random 12-character string with mixed symbols generally cannot claim.

A password manager makes memorability irrelevant for most accounts, but a handful of passwords cannot go in one at all — the master password unlocking the manager itself, a device's full-disk encryption passphrase, or a shared household WiFi password someone will eventually need to read off a screen and type manually. For exactly that small set of passwords that must be human-memorable and human-typeable, a passphrase is the stronger practical choice over a random string of similar bit-strength, precisely because a person can actually reproduce it correctly under normal conditions.