Why Passphrases Work
The classic advice to build passwords from substitutions — P@ssw0rd! — produced strings that are hard for humans to remember and easy for computers to crack, because cracking software tries all those substitutions automatically. Passphrases flip the trade: four or more truly random words are easy to hold in your head as a mental image, yet each word multiplies the search space by the full size of the wordlist.
The math: this generator draws from a curated list of just over 400 distinctive words. Four random words give 4044 ≈ 2.7×1010 combinations (~35 bits) — fine for medium-value accounts. Six words reach ~52 bits, and adding a random number and capitalization pushes further. For your password manager's master passphrase — the one password you must actually memorize — we recommend six words.
One rule matters above all: the words must be chosen randomly. A phrase you compose yourself ("iloveblackcoffee") follows grammar and frequency patterns that cracking dictionaries exploit. Let the generator pick; you just build the mental image.
Where to Use a Passphrase vs. a Random Password
| Situation | Best choice | Why |
|---|---|---|
| Password manager master password | 6-word passphrase | Must be memorized; typed often |
| Computer / disk encryption login | 4–5 word passphrase | Typed daily, no autofill available |
| Wi-Fi network | 4-word passphrase | Shared verbally with guests |
| Website accounts (stored in a manager) | 16+ char random password | Never typed by hand — maximize entropy |