Essential cookies only โ€” Cookie Policy.

About Passphrase Maker

NCSC three-random-words passphrase guidance written and maintained by an hobbyist with a keen interest in password security and online safety โ€” not a content agency.

Mission

The NCSC recommends three random words. Most people still use their pet's name. The gap between guidance and practice is an education problem โ€” this site addresses it by making correct passphrase generation effortless and the reasoning transparent.

Passphrase Maker exists because good password guidance has existed for years โ€” NCSC published three-random-words in 2016, NIST SP 800-63B followed in 2017 โ€” but adoption remains low because the tools for implementing it weren't as accessible as the advice. The Diceware Passphrase Generator makes the correct method the path of least resistance.

About the Author

Daniel Hayes is an hobbyist with a keen interest in password security and online safety who has spent over a decade advising public sector and commercial organisations on password policy, authentication systems, and user security awareness. His work includes implementing NIST SP 800-63B-aligned authentication for organisations subject to UK government security requirements and delivering passphrase adoption programmes to replace legacy complexity-based policies.

Key expertise

  • Password and passphrase policy design aligned with NCSC and NIST
  • Authentication system implementation (MFA, FIDO2, passkeys)
  • NIST SP 800-63B digital identity guidance
  • EFF Diceware methodology and wordlist analysis
  • Security awareness delivery โ€” technical and non-technical audiences

Primary sources

Technical Trust

๐ŸŽฒGenuine CSPRNG

crypto.getRandomValues() with rejection sampling โ€” perfectly uniform word distribution, no modulo bias.

๐Ÿ”’Zero transmission

Wordlist embedded in page. Nothing sent to any server. Verify in DevTools โ†’ Network.

๐Ÿ“ŠHonest entropy

Entropy is calculated accurately โ€” bits per word = logโ‚‚(wordlist size). Crack times at 10B/sec.

๐Ÿ†“No account required

No sign-up, no email, no subscription. Open the page and generate.

Organisation

Operated by: Kokal Operations Ltd, England and Wales
Website: passphrasemaker.net
Founded: 2026
Contact: [email protected]
Privacy: Privacy Policy (UK GDPR compliant)