Diceware Passphrases: Passwords You Can Actually Remember

For decades, security advice told us to make passwords that look like keyboard accidents: mixed case, numbers, symbols, changed every 90 days. The result was predictable — people could not remember them, so they reused one “clever” password everywhere and wrote the rest on sticky notes. Diceware takes the opposite approach: passwords made of ordinary words, chosen by pure chance, that are both stronger than typical gibberish and genuinely memorable. This guide explains why it works, how the math checks out, and how many words you actually need.

Passwords vs passphrases

A password like “Tr0ub4dor&3” feels secure because it looks complicated. But its complexity is an illusion: humans pick predictable substitutions (o→0, a→4), and attackers know every trick. A famous analysis showed that four random common words — “correct horse battery staple” — are far harder to guess than “Tr0ub4dor&3”, while being dramatically easier to remember and type. The lesson: strength comes from randomness, not from looking weird.

Diceware, created by Arnold Reinhold, is the classic implementation of this idea. Roll five dice, look up the resulting number (11111–66666) in a list of 7,776 words, repeat. Each word is one of 7,776 equally likely outcomes — the physical dice are just a randomness source. Modern tools do the same with a cryptographic random generator, which is faster and equally unpredictable.

Entropy math in plain English

“Entropy” sounds academic, but the idea is simple: it measures how many guesses an attacker needs, on average, to find your secret. It is counted in bits. Each additional bit doubles the guesses required — so small differences in bits mean enormous differences in effort.

With 7,776 words, each word contributes log₂(7776) ≈ 12.9 bits. A 6-word passphrase therefore has about 77.5 bits of entropy: roughly 2⁷⁷ combinations, or a 1 followed by 23 zeros. For comparison, a 12-character password drawn from 94 keyboard symbols has about 79 bits — similar on paper, but the passphrase is the one a human can actually memorize and type without errors. And unlike human-invented passwords, every combination is equally likely, so there are no weak patterns for attackers to exploit.

How many words for what threat model

4–5 words: fine for everyday accounts where logins are rate-limited (a website that locks you out after five tries). Far stronger than anything a person would invent.
6 words: the recommended default. Even if an attacker stole the password database and could try a trillion guesses per second, cracking would take centuries.
7–10 words: for secrets that must survive decades — your password manager’s master password, full-disk encryption. Ten words (≈ 129 bits) is beyond any plausible brute force, full stop.

One caveat matters more than word count: never reuse a passphrase. A unique 5-word passphrase per site beats one 8-word passphrase used everywhere, because breaches leak databases — and attackers always try stolen passwords on other sites first.

The EFF wordlist

The wordlist used by ToolsOfWeb’s generator comes from the Electronic Frontier Foundation (eff.org/dice), used under CC BY 3.0. The EFF designed it specifically for passphrases: short, distinctive, easy-to-type words, with confusingly similar entries removed. “Diceware” itself is Arnold Reinhold’s method; independent tools like this one implement the same diceware-style idea without affiliation.

Generate yours now

Try ToolsOfWeb’s Diceware Passphrase Generator: choose 4–10 words, pick a separator, and watch the live entropy meter and crack-time estimate as you adjust. Words are drawn with your browser’s cryptographic random generator using rejection sampling (no modulo bias), and everything runs locally — the passphrase never leaves your device. Copy it into your password manager, generate a fresh one per site, and you are done.

FAQs

What does “diceware” mean?+

It is Arnold Reinhold’s method of building passwords by rolling dice to pick words from a fixed wordlist — “dice” + “ware”. Five dice give a number from 11111 to 66666, which maps to one of 7,776 words. Digital generators do the same with a cryptographic random source instead of physical dice.

How is a passphrase different from a password?+

Only in form. A passphrase is a password made of whole words (“correct horse battery staple”) instead of random characters (“J7#qL9!vX2@”). Both are just secrets; passphrases trade character-level complexity for word-level randomness, which humans remember far better.

Can I just make up my own words?+

No — that destroys the security. Human-chosen words are predictable (“letmein sunshine dragon”). The strength comes from uniform random selection across all 7,776 words. Always let the generator pick.

Do passphrases work everywhere passwords do?+

Almost. Any system accepting a text password accepts a passphrase. The rare exceptions are outdated systems with tiny length limits (under ~20 characters) — for those, use a conventional random password instead.

Should I still use a password manager?+

Yes. Use memorable passphrases for the handful of secrets you must type from memory — your manager’s master password, your device login — and let the manager generate and store random passwords for everything else.

For more developer utilities, see ToolsOfWeb’s Password Generator and UUID v7 Generator.