🍋
Menu
How-To Beginner 1 min read 185 words

How to Generate Secure Passphrases

Passphrases are easier to remember than random passwords while being equally secure. Learn how to generate strong, memorable passphrases.

Key Takeaways

  • A password like `X#9kL!2m` is hard to remember.
  • Diceware uses physical dice to select words from a list of 7,776 words.
  • Using separators (hyphens, spaces, dots) between words adds minimal entropy but greatly improves readability.
  • Don't choose words yourself — human choices are predictable.

Passwords vs Passphrases

A password like X#9kL!2m is hard to remember. A passphrase like correct-horse-battery-staple is easy to remember and actually harder to crack due to its length. Entropy depends on length and randomness, not complexity.

Diceware Method

Diceware uses physical dice to select words from a list of 7,776 words. Each word adds ~12.9 bits of entropy. A 6-word passphrase has ~77 bits of entropy — comparable to a random 12-character password.

Words Entropy Crack Time (1T guesses/sec)
4 ~51 bits Days
5 ~64 bits Years
6 ~77 bits Centuries
7 ~90 bits Heat death of universe

Word Separator

Using separators (hyphens, spaces, dots) between words adds minimal entropy but greatly improves readability. Some systems require special characters — adding one number and one symbol to a passphrase satisfies complexity requirements.

Avoiding Patterns

Don't choose words yourself — human choices are predictable. Use a cryptographically secure random generator. Avoid song lyrics, book quotes, and common phrases.

Ilgili Araclar

Ilgili Rehberler