Generate a strong, memorable passphrase by combining random Portuguese words — the Diceware method with a local word list.
A passphrase is a password made of words instead of characters. The idea is simple: "cavalo batata espelho fornal oceano" is harder to crack than "P@ssw0rd!" because the entropy — the number of possible combinations an attacker would have to try — is vastly larger, even though the passphrase is easier to type and memorize. The method was formalized by Arnold Reinhold in 1995 as Diceware: roll five dice, look up the combination in a word list, repeat until you have enough words. This tool does the same thing digitally, with the Web Crypto API replacing the dice and a curated Portuguese word list replacing the lookup table.
The word list has 1,296 entries (6^4), each between three and eight letters, selected from the NILC/USP corpus of Brazilian Portuguese word frequency. They are common enough to be memorable, short enough to type quickly, and stripped of accents so they work on any keyboard. Each word adds about 10.34 bits of entropy to the passphrase, so five words give ~52 bits (fine for most accounts), six give ~62 bits (good for e-mail and cloud storage), and eight give ~83 bits (strong enough for a master password or a disk encryption key). Adding a random number from 0 to 999 adds another ~10 bits.
The passphrase is generated entirely in your browser. The word list is embedded in the page, randomness comes from crypto.getRandomValues, and nothing you generate is uploaded, stored or logged. If you want a random password instead of a passphrase — symbols, mixed case, no dictionary words — use the password generator tool.
Entropy = number_of_words × log₂(1296) ≈ number_of_words × 10.34 bits. Adding a random 0–999 number adds log₂(1000) ≈ 9.97 bits.
Five words (~52 bits) are enough for most online accounts. For a master password or disk encryption, use seven or eight.
Usually, yes. "P@ssw0rd!" has about 28 bits of entropy because it follows predictable substitution patterns. Five random words from a 1,296-word list have 52 bits, and they are easier to remember and type.
No. Everything is generated locally with the Web Crypto API.
The strength comes from the number of words, not from the list being secret. Even knowing the exact 1,296 words, an attacker trying all five-word combinations would face 1,296^5 ≈ 3.4 × 10^15 possibilities.
So the passphrase works on any keyboard layout, including US English. Accents add memorization complexity without meaningful entropy.
Yes. Space, hyphen, underscore and period are offered. Some systems reject spaces in passwords; a hyphen or underscore avoids that without reducing strength.
Vai.la turns any URL into a short link with click statistics, QR Code and your own biolink.
Vai.la is not responsible for how the tools are used or for decisions made based on their results.