Create a passphrase you’ll actually remember
How to create a strong passphrase, with a free passphrase generator from Malwarebytes
A few random words are stronger than a short jumble of symbols, and much easier to remember. Here’s how passphrases work, how to make a good one, and a generator to get you started.
What is a passphrase?
A passphrase is a password made of several random words strung together, like tulip-gravel-orbit-saddle. Each word adds length, and length is what makes a password hard to guess or crack. Because it’s built from real words, it’s also far easier to remember than something like X7#q!9z.
Long
Several words add up to a long password. Tools that try every possible combination take far longer to get through it.
Random
Words picked at random have no link to you, so nobody can guess them from your social media, your pet’s name, or your birthday.
Memorable
A handful of words is something you can picture and type, so you’re less likely to write it on a sticky note or fall back on an old password.
How to create a passphrase
It takes about a minute. Follow these four steps for each account you want to protect.
Step 1
Pick four or more random words
Use the generator below, or roll dice and pick from a word list. Don’t choose the words yourself. People are more predictable than they think.
Step 2
Skip anything famous or personal
Leave out song lyrics, quotes, names, dates, and places tied to you. Those are the first things attackers try.
Step 3
Join the words together
Put a hyphen, space, or other separator between the words. If a site asks for a number or symbol, add one somewhere you’ll remember.
Step 4
Use it once and store it safely
Give every important account its own passphrase. A password manager can remember them for you, and two-factor authentication adds a second lock.
Check your passphrase
Passphrase generator
Click generate to get a random passphrase. Don’t like it? Generate another. When you find one you like, save it in your password manager before you leave this page.
PLACEHOLDER: the passphrase generator widget goes here. Replace this card before publishing.
Your passphrase is created in your browser. We don’t see it or store it.
FAQs
What’s the difference between a password and a passphrase?
How many words should a passphrase have?
Can I use the same passphrase for more than one account?
Is it safe to use a passphrase generator?
Do I still need two-factor authentication?
Protect more than your passwords
A strong passphrase is a great start. Malwarebytes helps block malware, scam sites, and other threats, so one slip doesn’t turn into a stolen account.