REMEMBER THE RANDOM
Build a Scene, Not a Quote.
Keep the generated words in order and picture an unusual private scene connecting them. Memory can be personal; the words should still come from random selection.
Learn the method →PASS PHRASES, PASSKEYS & SECOND FACTORS
More Words. Less Guesswork.
Choose a few random words, generate a phrase, then copy it. Every result is at least 15 characters long. Your phrase is made on your device and is not sent to us.
01 / GENERATED ON YOUR DEVICE
Random-Word Pass Phrase
Start with 3, 4 or 5 words—or choose more. Then press Generate and copy your phrase. More random words make it harder to guess.
Nothing has been generated or sent.
Keep it unique: use a different phrase for each account. Save it in a trusted credential manager and turn on 2FA when offered. For important accounts, choose more words. A 15-character minimum alone is not a strength guarantee. Your device may keep or sync copied text.
How it works — optional technical details
Words are drawn with replacement from EFF’s 7,776-word list using crypto.getRandomValues(). Rejection sampling avoids biased remainder selection. If a complete phrase is shorter than 15 characters, it is discarded and a fresh one is drawn—no predictable padding is added.
Three random words provide roughly 38.8 bits of selection entropy before the small length-filter adjustment; six provide about 77.5. Only combinations meeting the 15-character minimum are accepted. This is not a cracking-time guarantee or a security score. Meeting a length rule alone does not make a short phrase as strong as a longer one. A fixed separator adds no randomness. Repeated words can occur legitimately.
Wordlist: Electronic Frontier Foundation, attribution and license. The list is public; security depends on the unpredictable selection, not a secret list.
THE NEXT LAYER
Turn On an Extra Check.
2FA adds another check when you sign in, such as an authenticator app or security key. If a site offers a passkey, it can make sign-in easier and resist fake sign-in pages. Keep a safe recovery option, too.
Understand passkeys →A SIMPLE NEXT STEP
Let a Password Manager Remember.
You do not have to memorize a different phrase for every account. A password manager can save them for you. Learn what to look for, explore free and paid options, and set up recovery before you need it.
Compare practical password-manager options →UNDERSTAND THE WHY
Simple Steps to Safer Sign-Ins
FIELD NOTE 01
Memorable Does Not Mean Predictable
Choose random words first. Use a private mental picture to remember them afterwards.
Read the guide ↗FIELD NOTE 02Password Managers: A Simple Place to Start
A password manager remembers different pass phrases for you. Here are four options to explore, with the useful differences explained.
Read the guide ↗FIELD NOTE 03Passkeys: Sign In Without a Shared Secret
Understand what a passkey changes, how devices unlock it, and why recovery still matters.
Read the guide ↗FIELD NOTE 042FA: A Second Kind of Proof
Learn the difference between an extra question, an authenticator code and phishing-resistant authentication.
Read the guide ↗FIELD NOTE 05Recovery, Sharing & Lost Devices
A strong sign-in needs a recovery route that is safe enough—and available when you need it.
Read the guide ↗