3-Word Passphrase Generator

A 3-word passphrase generator creates short, highly memorable passphrases using exactly 3 random words. With ~33 bits of entropy, 3-word passphrases are suitable for low-stakes accounts and any credential where memorability is paramount and the system enforces additional security like rate-limiting.

Click Generate to create a passphrase
🔒 Passphrases are generated in your browser and never transmitted.

When to use a 3-word passphrase

3-word passphrases (~33 bits of entropy) are best for: WiFi passwords you'll dictate to guests, device unlock PINs where biometrics back them up, low-value accounts without sensitive data, and any situation where brevity is essential. For accounts with sensitive information, use 4–6 words for adequate security.

Entropy of 3-word passphrases

With a 2,000-word wordlist, 3 words provide 3 × log₂(2000) ≈ 33 bits of entropy. This is equivalent to a random 5-character password with all character types — modest for online accounts but reasonable for rate-limited systems. Adding a number (+7 bits) and capitalization (minimal entropy gain for memorability) brings it closer to 40 bits.

Frequently Asked Questions

A 3-word passphrase (~33 bits) is suitable only for rate-limited systems or low-stakes accounts. For online accounts, use at least 4–5 words. For high-value accounts, use 6+ words. The shorter the passphrase, the more important it is to have 2FA enabled.

3-word passphrases work well for WiFi passwords you'll need to share verbally, device PINs backed by biometrics, and any low-stakes account where memorability is the priority. Always enable 2FA where available to compensate for lower entropy.

From a 2,000-word list: 3 × log₂(2000) ≈ 33 bits. Adding a number: ~40 bits. Compare to a strong account password recommendation of 50+ bits — 3 words alone falls short for most accounts.

Yes — appending a random 2-digit number adds ~7 bits of entropy, bringing a 3-word passphrase to ~40 bits. Enable the "Append a number" option in the generator. This also helps satisfy numeric character requirements on many sites.