FormatFlow

Passphrase Generator: Secure EFF Diceware Multi-Word Passwords

Generate secure, easy-to-remember passphrases using the Electronic Frontier Foundation (EFF) wordlist. Calculates genuine mathematical entropy with zero persistence.

Generated EFF Passphrase
0 bits entropy
Passphrase Settings (EFF Wordlist)

How to Use Passphrase Generator

  1. Select the number of words (3 to 8), separator character, and whether to include digits.
  2. Choose a security preset: Maximum Security, Easy to Read, Easy to Type, or PIN.
  3. View the calculated Shannon entropy in bits computed from the exact mathematical character space.
  4. Click "Regenerate" to generate new random combinations. Zero data is ever saved or stored.

Practical Examples

EFF Diceware Passphrase

EFF short wordlist with hyphen separator.

Input:
4 words + number
Output:
Apple-Cider-Forest72-River (~48 bits entropy)

Common Mistakes & Troubleshooting

  • Reusing passwords across multiple websites: always use unique credentials generated client-side.
  • Persisting generated passwords: passwords are wiped on page reload to protect your security.

Frequently Asked Questions

How do passkeys work compared to generated passwords?

Passkeys use the FIDO2/WebAuthn public-key standard, generating a unique cryptographic key pair for each website. Your private key stays securely on your device (protected by biometrics or a PIN), while only the public key is stored on the server, eliminating phishing vulnerabilities. For services that do not yet support passkeys, using strong, unique random passwords remains essential.

Why should I exclude ambiguous characters (0, O, 1, l)?

Characters like uppercase "O" vs digit "0", and lowercase "l" vs uppercase "I" or digit "1" look nearly indistinguishable in many display fonts. Excluding them prevents frustrating login mistakes when typing passwords manually on mobile devices or game consoles.

What makes a password cryptographically secure?

FormatFlow uses the browser native window.crypto.getRandomValues API with rejection sampling to eliminate modulo bias. This ensures each character is selected with uniform mathematical probability across your chosen character set.

Are generated passwords saved anywhere on FormatFlow servers?

NO. FormatFlow never persists generated passwords, does not write them to localStorage, and never transmits them over the internet. Everything is computed in volatile memory.

How is entropy calculated?

Shannon entropy is calculated using the formula: Entropy = Length × log2(Charset Pool Size). For passphrases, entropy equals Words × log2(Wordlist Size).