Sunday, August 16, 2015

XKCD-style password generator

There are a number of sites that generate XKCD-style passwords (see: Most generate the pass phrases on their server, meaning they have you IP address and the pass phrase they generated for you. Being the type that doesn't trust others to generate my passwords, I wrote some JavaScript to do the same in my browser. I took the 11029 5 - 8 character words from Google's 20000 most popular English words (git clone Here's the result, hit "Generate!" as many times as you'd like to get a memorable phrase. In general, you shouldn't need to use numbers, upper case characters, or symbols unless needed for a site's requirements, as long as the phrase is longer than 16 or so characters. You can view the source to this page to see how it works if you're curious.

Number of words
Include numbers
Include random upper case
Include symbols
Word separators


No comments: