Black Sheep Systems.

Diceware · no network

The passphrase they can't guess.

Every word and character pool is editable. Randomness comes from the browser's cryptographic generator with rejection sampling, so no value is more likely than any other.

loading

Entropy
0
Assessment
–
Mean guess time @ 1011/s
–
Word list — 0 words, 0 bits each

One word per line or separated by spaces. Duplicates and blanks are dropped when the list is read. Entropy recalculates from whatever is actually in this box.

Reading the numbers

Offline use. Save this page as a single .html file and open it from disk. It pulls three typefaces from Google Fonts on first load and falls back to Georgia, Arial Black and Menlo without them; nothing else is fetched, and nothing you generate leaves the page. Settings are kept in this browser's local storage. Passphrases never are.

Entropy. The figure assumes an attacker knows exactly how the passphrase was built and only has to guess the random choices — the right assumption to make. Mean guess time is half the search space at 1011 guesses per second, roughly a well-funded offline attack on a fast hash. A service that rate-limits to a few guesses per second makes 60 bits plenty; use 80 or more for a vault or a key.

The list. The default is the EFF long wordlist — 7,776 entries, 12.92 bits each, numbered 11111 to 66666 so you can roll five dice and look words up by hand instead. Four hyphenated entries are spelled without hyphens so separators stay unambiguous.

Offline copy

Take it with you.

passphrase-bench.zip — one HTML file →

The same tool, built to run from disk: no typefaces fetched, nothing loaded from anywhere. Unzip it, open the file in a browser, and it works on a machine that has never been online. Saving this page from your browser works too — the zip just skips the step where it tries to reach Google Fonts.