Memorable password generator

Random real words plus the capital, number and symbol that sign-up forms insist on. Your password is ready below: copy it, or press Show 5 options to pick the easiest to remember.

Why this beats a "clever" password you'd invent

People asked to make a memorable password reach for the same tricks: a pet's name, a year, a capital at the start and ! at the end. Password-cracking tools such as hashcat ship with rules built for exactly these habits, so they fall early. Here the words are chosen by crypto.getRandomValues from the EFF's 7,776-word list, and that randomness is where the strength comes from.

What the extras are worth

AdditionEntropy addedWhy
One more EFF long-list word+12.9 bitslog2(7,776)
Random UPPER/lower per word+1 bit per wordtwo equally likely forms
One random digit+3.3 bitslog2(10)
One random symbol (from 10)+3.3 bitslog2(10)
Capitalise Each Word0 bitsfixed style, so an attacker assumes it

So the digit and symbol exist to satisfy the form, and the words do the real work. If you want more strength, add a word.

Making it stick

  1. Read the words and picture them in one absurd scene, in order.
  2. Say the password out loud once, including the digit and symbol ("…Canopy dash Relic five bang").
  3. Type it from memory a few times today and again tomorrow. Most people have it after a handful of logins.

Need something with no dictionary words at all? Try the pronounceable password generator. Not sure how many words you need? The entropy calculator shows guess times.

Questions

What makes a password memorable and still secure?

Real words are easy to picture and type; randomness is what makes them hard to guess. A memorable password generator gives you both: it picks the words at random, then adds only the capital, digit and symbol that sites require.

Is Word-Word-Word-Word5! strong enough?

Four EFF long-list words plus one random digit and one random symbol is about 58 bits. That is fine for accounts behind rate-limited logins or two-factor authentication. For a master password or disk encryption, use six words.

The site says my password is too long. What now?

Switch to EFF short list 1 (words of 3–5 letters) and drop the separator, or paste the site's rules into the AI box and it will pick settings that fit the limit, telling you the entropy cost.

What is a good memorable password?

One built from several randomly chosen words, such as four or five words from a large list, plus a digit and symbol only if the site insists. Its strength comes from the random picks, so the words can be ones you find easy to picture.

What is an example of a strong 12-character password?

Twelve characters is tight for words. Three short random words with a digit, in a pattern like fog-ink-bay7 (an illustration, not one to use), give about 34 bits from the EFF short list, which is modest. NIST SP 800-63B now asks for at least 15 characters when a password is used on its own, so where a site allows it, go longer.

Should I reuse a memorable password on several sites?

No. If one site leaks it, attackers try it everywhere. Memorise one or two passphrases (password manager, email, computer) and let a password manager store unique random passwords for everything else.