Diceware Passphrases Explained: Why Words Beat Symbols

For years we were told that a strong password looks like a cat walked across the keyboard. Then a simple idea changed the conversation: string together a handful of truly random words and you get something easier to remember and just as hard to crack. That idea has a name — Diceware — and it still powers modern passphrase advice. This explainer shows where it came from, why it works and how to apply it today.

Where Diceware came from

Diceware was published by Arnold Reinhold in 1995. The method is beautifully low-tech: you roll an ordinary six-sided die five times, read the results as a five-digit number such as 4-1-3-6-2, and look that number up in a list of 7,776 words (6 × 6 × 6 × 6 × 6). Repeat for each word you want. Because dice cannot be influenced by your preferences, every word is genuinely random.

The idea reached a much wider audience in 2011, when a popular web comic compared a cryptic password with four random common words and argued that the words were both stronger and easier to remember.

Turning words into bits

The security of a passphrase depends on two numbers only: how many words are in the list, and how many you pick. Each word contributes log2 of the list size:

• A 7,776-word list gives about 12.9 bits per word.
• Four words give about 52 bits, five give about 65 bits, six give about 78 bits.
• A smaller list gives fewer bits per word, so you simply add a word or two.

Crucially, the attacker is assumed to know your word list and your method. The strength comes entirely from the random choice, not from secrecy about how the passphrase was built — that is what makes the calculation honest.

Why random words beat clever symbols

A password like P@ssw0rd! looks complex but follows patterns that cracking tools try early: a dictionary word, predictable substitutions, a capital at the start and a symbol at the end. A passphrase such as orchard curious riddle bright listen has no such shortcut. Its advantages:

• Memorable — you can picture a story linking the words.
• Typeable — especially on phone keyboards, where symbols need extra taps.
• Measurable — you can calculate its strength instead of guessing.

The one rule you must not break: the words have to be chosen randomly. A phrase you invent yourself, like a song lyric, is far weaker than it looks.

How to build a passphrase with the generator

The generator above does the dice rolling for you with a cryptographically secure source:

1. Choose the number of words, from 3 to 12. Five or more is a good default for important accounts.
2. Pick a separator: hyphen, space, dot, underscore or none.
3. Turn on capitalize each word and append a number if a site insists on capitals and digits.
4. Create up to 30 passphrases at once and read the estimated bits shown with each one.
5. Choose the result that is easiest for you to picture — choosing among a few random options costs very little strength.

Everything runs in your browser; the passphrases are never transmitted or saved.

Where passphrases shine

Passphrases are ideal for the few secrets you must type from memory: your password manager’s master password, your computer login and disk encryption. For the hundreds of other accounts, let a password manager store long random passwords instead.

A worked example

Suppose you roll five dice and get 1-6-3-2-5, then 4-4-1-6-2, and so on until you have five words: clamp lucky harbor velvet sprout. With a 7,776-word list, the number of possible five-word phrases is 7,776 to the fifth power — more than 28 thousand trillion trillion combinations, or about 65 bits. Even an attacker who knows you used Diceware and knows the exact list has to search that whole space.

Now compare it with a phrase you invent, such as a favorite quote. Quotes, lyrics and proverbs are collected in cracking dictionaries, so the effective search space shrinks to a tiny fraction. Randomness, not length alone, is what makes the method work.

Pro tips

• Never edit a generated passphrase into something “nicer” — that brings human patterns back.
• Use six or more words for a master password that protects everything else.
• Imagine a vivid scene that links the words in order to remember them.
• Turn on two-factor authentication as well; a passphrase is one layer, not the whole defense.

Frequently asked questions