Passphrase

12.9 bits per word, from a list of 7,776 — and zero for the capital letters.

words.passphrase · v1 · renderer text

washbowl-turret-sketch-retread-agent-wanting

Controls · from schema()

Words

4 12

Six words is 77.5 bits. Four is 51.7 — fine for a laptop login, not for a password manager.

Wordlist

Separator

Capitalise each word

Adds zero bits. It is a rule, and the attacker has the rule too.

Append a number

Adds 6.6 bits, because this one is actually drawn at random.

Entropy source

Picking a source changes the story on the receipt, never the quality: anything below class A is mixed with the OS CSPRNG before it reaches you. This result actually came from Operating System CSPRNG.

There is no same-seed re-render here. Recomputing a secret from a kept seed is exactly the thing this generator refuses to make possible, so every change of parameters draws fresh entropy.

seed token withheld

Nothing to keep: no token is issued for a generator that makes secrets.

entropy in

16 bytes

stream used

12 bytes

entropy out

77.6 bits

rejections

duration

6,107 µs

bits per word

12.93

list size

7,776

formula

H = 6 × log₂(7,776) = 77.55 bits

crack time

35 thousand years

assumption

10¹¹ guesses/second — a GPU rig against a fast hash.

free extras

Separator between words — worth 0.00 bits, because the rule is deterministic

Seed receipt

Class A · Cryptographic degraded

Drawn from the kernel entropy pool on the server that rendered this page. (The source you picked was unreachable, so we fell back to the kernel.)

source: Operating System CSPRNG
observed: 2026-10-28T22:14:36+00:00
latency: 1507ms
mixed with: nothing — this source stands alone

This source publishes no per-draw proof URL.

No permalink

This generator makes secrets, so it is never given a shareable link. A password with a replayable URL is not a password — anyone holding the link could recompute it byte for byte, forever. The seed token is discarded the moment the response is written; nothing here is stored, logged or recoverable.

seed · withheld by design · words.passphrase is marked sensitive

This page and /api/v1/g/words.passphrase run the same code. There is no private endpoint.

Passphrase

Result

Measurements

Seed receipt

No permalink