AltF Security

Random passphrase generator

Generate a passphrase of random words, or a classic random password, using your browser's cryptographic random number generator. Each word adds 11 bits of entropy, so a five-word passphrase has 55 bits and a six-word one 66 - strong enough for most accounts when the site limits guessing, and far easier to type than a string of symbols.

  • Free, no sign-up
  • Passwords never leave your browser
  • No fake scans or scores
  • Works on mobile

How many words do I need?

  • 4 words (44 bits): fine for low-value accounts behind rate-limited logins.
  • 5 words (55 bits): a good default for most online accounts.
  • 6 words (66 bits): email, banking and anything that can reset other accounts.
  • 7+ words (77+ bits): a password manager master password or disk encryption.

Why random words beat clever passwords

People are predictable: a capital first letter, a number at the end, an @ for an a. Attackers' cracking tools apply those rules automatically. Randomly chosen words have no pattern to exploit, so their strength is exactly the maths - and you can still remember "orbit-lemon-candle-ferry-gravel".

Where to keep a new passphrase

Store it in a password manager, and memorise only the few you type often: your device login, your email and the manager itself. Turn on two-factor authentication for the accounts that matter most.

Random passphrase generator: questions and answers

Is this passphrase generator truly random?

Yes. Words are chosen with crypto.getRandomValues, the browser's cryptographically secure generator, using rejection sampling so every word is equally likely.

Is a generated passphrase stored anywhere?

No. It exists only on this page until you copy it. Refreshing the page clears it.

What is the difference between a passphrase and a password?

A passphrase is a password made of several words. Its strength comes from the number of random words rather than from symbols, which makes it longer and easier to type.

Should I add numbers and symbols to a passphrase?

Only if a site demands them. The option adds a random digit to satisfy such rules, but an extra word adds more strength than a symbol.

Security checks and guides

Full security check-upAll six tools, the tool directory and how each check works.Password leak checkerCheck if your password appears in known data breaches without sending it, plus a strength score and crack-time estimate. Free, private, k-anonymity based.Phishing link checkerCheck a suspicious link for phishing tricks before you click: lookalike domains, fake bank and UPI links, punycode, hidden redirects. The link is never opened.Website security checkTest any website's security headers (HSTS, CSP, X-Frame-Options, cookies and more), get a grade and copy the exact fix. Plus a private page code audit.Personal security checkupTake a free 24-point personal security checkup covering passwords, 2FA, devices, scams, privacy and home Wi-Fi. Get a score and your highest-impact next step.Hacked account recoveryYour email, Instagram, WhatsApp or bank account was hacked? Follow these recovery steps in order, secure your email first, and know where to report fraud in India.Data breach responseGot a data breach email or saw your service in the news? Find out what was exposed, which passwords to change, and how to avoid follow-up scams.

88 more free security and privacy tools

Focused tools for one job each, grouped by what you are trying to do. All run in your browser unless the tool says otherwise.

Passwords and sign-in

Create, test and manage the credentials that guard everything else.

Scams and phishing

Spot tricks in messages, links, QR codes and calls before they cost you.

When something goes wrong

Step-by-step help after a hack, a breach, a lost phone or a card fraud.

Devices and home network

Harden phones, computers, routers and smart devices.

See all 88 tools

AltFTool stores no passwords, links or results. Only the website check uses AltFTool's server, to read headers, and it keeps nothing.