Simulated Dice Roll

Create secure passphrases with simulated dice rolls.

Ready to roll?

Click the "Generate Passphrase" button to start.

Manual Dice Roll

Look up a word using your own physical dice rolls.

Your resulting word will appear here.

How to Use the Diceware Method Manually

  1. Get Your Materials:
    • Up to five standard six-sided dice.
    • A Diceware word list (like the EFF Large Wordlist) which contains 7776 words, each corresponding to a five-digit number generated by rolling five dice.
    • Paper and pen.
  2. Decide on the Length:
    • The original Diceware method recommends a minimum of six words for most applications.
    • For higher security, consider using seven, eight, or even nine words.
  3. Roll the Dice:
    • For each word in your passphrase, roll the five dice simultaneously.
    • Note the numbers from left to right (or in the order they appear when rolling).
    • For example, you might roll 4, 3, 4, 6, 3.
  4. Enter the Number You Rolled in the Lookup Table.

    For the example above (4, 3, 4, 6, 3), the word "panoramic" would be found on the EFF Large Wordlist.

  5. Repeat For Each Word:

    Continue rolling the dice and looking up words until you have the desired number of words for your passphrase.

  6. Memorize & Record It:
    • Write down your complete passphrase on a piece of paper.
    • Memorize it thoroughly and enter it in your password manager.
    • Once you are sure you have memorized it, destroy the piece of paper securely (e.g., shred it and burn it).
  7. Mnemonic device (optional):

    To help you remember your passphrase, create a mnemonic or story based on the words.

About Passphrases & Dice Generation

What is a Passphrase?

A passphrase is a sequence of words used to secure an account or system, similar to a password. The key difference is that passphrases are typically longer and composed of whole words, making them significantly easier for humans to remember than complex strings of characters (like p@s$W0rd!). Because of their length, well-constructed passphrases can be much more secure than traditional passwords against brute-force guessing attacks.

Why Use Dice? The "Diceware" Method

Using physical dice to generate your passphrase words, a method known as "Diceware", is the gold standard for creating secure credentials. Here's why:

  • True Randomness: While computers are excellent at calculation, they generate "pseudorandom" numbers, which are determined by a starting seed. Physical dice rolls, on the other hand, provide true physical randomness. This unpredictability is the foundation of strong cryptographic security.
  • Avoiding Human Bias: When we choose our own words, we are subconsciously biased toward words that are familiar, personal, or easy to type. Attackers know this and use targeted dictionaries. Diceware removes this bias entirely by letting the dice make the selection from a large, pre-vetted wordlist.
  • Measurable Security (Entropy): The randomness from dice rolls translates directly into measurable security, or "entropy." Each roll of a standard six-sided die provides log₂(6) ≈ 2.58 bits of entropy. When you roll 5 dice, there are 6⁵ = 7,776 possible combinations. The entropy for a single word chosen this way is log₂(7776) ≈ 12.9 bits. A 6-word passphrase from this list therefore has about 77.4 bits of entropy (6 × 12.9 bits), making it incredibly difficult to guess.

Security Through Length and Randomness

The strength of a dice-generated passphrase comes from two factors working together: the randomness of the word selection and the overall length of the phrase. Each additional word doesn't just add to the length; it multiplies the number of possible combinations an attacker would have to guess, making the passphrase exponentially stronger. This tool simulates that physical process, providing a convenient way to generate strong, memorable, and truly random passphrases.

Privacy & Security Guarantee

Your privacy is paramount. All passphrase generation, dice rolling, and security calculations on this site are performed entirely on your device, within your browser. No data, including your passphrase or any settings, is ever sent to our servers or any third parties. Everything stays local to your machine.

To learn more about the Diceware method and its importance, check out the Electronic Frontier Foundation's official page: EFF.org/dice.