This memorable password generator builds a password out of four short real words, a digit and a symbol — long enough to be worth having, short enough that a signup form will accept it.
What is a memorable password generator?
A memorable password generator joins randomly chosen real words into something a person can recall and a website will accept. You remember the words; the randomness comes from the draw, not from you.
How it differs from a passphrase
Both pick random words from a list. What separates a passphrase from a memorable password generator is who sets the rules.
A passphrase goes into a prompt you control — a disk, a vault, a master password — so it can be forty characters of long words and spaces. A memorable password goes into somebody else's signup form, which caps the length, often rejects spaces, and insists on a digit and a symbol.
So the target is not the most entropy you can memorise. It is the most entropy the form will accept, and that single constraint is what a memorable password generator has to work inside.
When you should use neither
Most of your passwords should not be memorable at all. If a manager fills the field, a fully random string from the password generator is stronger and costs you nothing to remember.
Reach for a memorable password generator for the handful you actually have to type: the device login, the manager itself, the account you need on a borrowed laptop.
Why short words win
The budget is characters, not words
Advice about word-based passwords almost always counts words. Password fields count characters, and that changes which word list a memorable password generator ought to use.
EFF publishes two. The long list has 7,776 words worth 12.9 bits each, and averages seven letters a word. The short list has 1,296 words worth 10.3 bits each, and averages 4.5.
Under a sixteen character limit EFF's short list fits two words worth 20.7 bits while the long list fits one word worth 12.9. At twenty characters it is three words and 31.0 bits against two words and 25.8. At twenty-four characters it is four words and 41.4 bits against two words and 25.8. At thirty-two characters it is five words and 51.7 bits against three words and 38.8. The short list wins at every limit even though each of its words carries 10.3 bits against 12.9, because the budget being spent is characters rather than words.
That result is why this memorable password generator does not simply reuse the passphrase page's word list. A list with fewer bits per word delivers more of them inside a form field.
What EFF's short list is
It was published in 2016 alongside the long one, specifically for people who wanted shorter passphrases. Every word is at most five letters, and the words were picked for being memorable and distinct rather than merely uncommon — which is precisely what a memorable password generator needs.
1,296 is 6⁴
Four rolls of a six-sided die select one word, which is what makes the list usable with physical dice as well as with a browser. It also fixes the arithmetic exactly: log₂(1296) = 10.34 bits per word.
What actually makes a word memorable
Most tools skip this part
The category has a peculiar failure mode: a memorable password generator that produces words nobody knows. One of the better-ranked ones returned RugsEmbodyCroft,StromaPilawsRemade and MuxedOrgyInvest on three consecutive tries.
Those are real English words. They are also words most people cannot spell, would not recognise, and in one case would rather not have in a password read over someone's shoulder at work.
Which is the one job
A memorable password generator that hands you StromaPilawsRemade has produced a random password, not a memorable one. Curating the list is not a detail; it is the entire difference between this category and a random string.
Substitutions do not help
Another common feature is swapping letters for lookalikes — a for @,o for 0 — to satisfy a form and look clever. It is the second thing a memorable password generator should not do.
Measured by this site's own strength estimator: the word password scores zero bits. Rewriting it as p-at-ssw-zero-rd scores two bits. Adding one more randomly chosen word from the short list instead is worth 10.3 bits, five times as much, and is easier to remember.
Every cracking tool applies those swaps automatically, because everybody makes them. You can verify the numbers yourself in the password strength checker.
And neither do hint phrases
One competitor offers a hint phrase to help you recall the password, then warns you never to share it with anyone. That warning is the giveaway.
Anything that reconstructs the password is a second copy of the password, stored somewhere less carefully. Four short real words from a memorable password generator should not need a crutch.
Reading the strength figure
Why the digit and symbol score nothing
The number above the settings comes from the words alone. This memorable password generator places the digit and the symbol, but does not count them.
"Contains exactly one digit and one symbol" is something an attacker knows for free — it is what the form demanded. Charging full price for characters an attacker can anticipate would flatter the result, so this memorable password generator reports a floor instead.
They still go somewhere useful
Both are attached to a randomly chosen word rather than to the end. Cracking rules try trailing decorations first, so Tiger47-Mango-Cloud! costs an attacker more thanTiger-Mango-Cloud47!, at no extra effort from you.
Is 41 bits enough?
Behind a login that limits attempts, comfortably. Against an attacker who has taken away a password database and can guess offline at speed, no — and no memorable password generator, including this one, solves that case.
That is the trade a memorable password generator asks you to make, and it is a reasonable one for the few passwords you must recall. For everything else, let a manager fill something random.
The hyphen exception
One word on the list, yo-yo, contains a hyphen. With a hyphen separator,acid-yo-yo-zesty cannot be read back as three words.
So it is removed from the pool for that separator, and the entropy figure counts 1,295 words rather than 1,296. The difference is a thousandth of a bit, but a figure should describe what actually happened.
Frequently asked questions
How is this different from your passphrase generator?
Length limits. A passphrase goes into a prompt you control, so it can be forty characters of long words and spaces. A memorable password goes into somebody else’s signup form, which caps the length and often rejects spaces. This page uses EFF’s short word list so four words still fit in about twenty-three characters.
Why use a smaller word list? Does that not make it weaker?
Per word, yes: 10.3 bits against 12.9. In a password field, no. The long list averages seven letters a word, so a twenty-four character limit buys two words and 25.8 bits. The short list averages 4.5 letters, buys four words, and gets 41.4 bits. What the form limits is characters, not words.
Is 41 bits actually enough?
For an account behind a login that rate-limits attempts, yes. For anything an attacker could take away and crack offline, no. If you do not have to type this password from memory, let a password manager fill a fully random one instead — this tool exists for the passwords you do have to remember.
Why is the digit not at the end?
Because that is the first place cracking rules look. Appending a digit and a symbol is the single most predictable thing people do to a password, so this memorable password generator attaches them to a randomly chosen word instead. It costs nothing and removes the obvious shape.
Does the digit and symbol count toward the strength figure?
No, and that is deliberate. "Contains exactly one digit and one symbol" is information an attacker has for free, so charging full price for them would overstate the result. The number shown comes from the words alone, which makes it a floor rather than a flattering estimate.
Would swapping letters for @ and 0 make it stronger?
Barely. This site’s own strength checker scores password at 0 bits and p@ssw0rd at 2, because every cracking tool applies those swaps automatically. One extra word from the list is worth 10.3 bits, five times as much, and is far easier to type.
Can I get a hint to help me remember it?
No, and not by accident. Some generators offer a hint phrase and then warn you never to share it, which is the giveaway: anything that reconstructs the password is a second copy of the password. Four short real words are meant to be memorable without a crutch.
Where do the words come from?
EFF’s short word list #1 — 1,296 words chosen to be memorable, distinct and at most five letters, published under CC BY 4.0. It is built into the page, so nothing is fetched and the generator keeps working with the network disconnected.
More free generators
Every tool here runs locally in your browser, with no account and no limits, on the same terms as this memorable password generator.
Password Tools
Random Generators
Keys & Secrets
Methodology
Last updated
How the words are chosen
Each word is drawn from EFF's short word list #1 withcrypto.getRandomValues() through rejection sampling, so every word is equally likely and Math.random() is never used anywhere in this memorable password generator. The list is embedded rather than fetched, so nothing reaches a network.
How the entropy is calculated
bits = words × log₂(pool size)
Pool size is 1,296, or 1,295 when a hyphen separator removes yo-yo. Capitalisation is a fixed rule rather than a random choice, so it adds nothing. The digit and symbol are excluded deliberately — see above.
Why a second word list
The passphrase generator on this site uses EFF's 7,776-word long list, which is the right choice when length is unconstrained.
Inside a form that caps at twenty-four characters the 1,296-word short list yields 41.4 bits against 25.8, so the memorable password generator takes that one. Both lists are embedded; each page uses whichever fits its constraint.
What this does not do
It does not check the password against a breach list, know which sites reject which symbols, or store anything you generate. Nothing is transmitted, written to storage, placed in the URL or attached to an analytics event.