CorrectStaple

XKCD #936 ↗

Cryptographically Correct XKCD #936 Passphrases • 100% Offline CSPRNG

7,776 EFF Words • CSPRNG

Random Words (7,776 pool) Cryptographic Numbers Special Character(s)

🧠 Mental Picture Story 🎬 Heist Scene

🛡️ Security & Entropy Strong (60–74 bits)

0.0 bits • 0 chars

Offline Slow Hash (bcrypt/Argon2, 100k/s): — Offline Raw GPU (100B/s): — Online (1k/s): —

⚙️ Customize Passphrase Rules

⚡ Quick Presets:

Number of Words 4 words

3 (38.7 bits) 4 (51.7 bits) 6 (77.5 bits) 8 (103 bits)

Word Pool & Length Filter 7,776 words

Filters word lengths for faster mobile typing, with exact log2(pool) entropy accounting.

Total Character Length Cap Any length

Min Total Chars

Max Total Chars

Word Separator -

Delimiter placed between words (and separate number/symbol tokens).

Capitalization & Condenser Style

Random Word UPPERCASE adds +log₂(words) bits; condensed modes trade entropy for length.

Digits to Include 2 digits

Number Placement

Special Characters 1 symbol

Symbol Placement

Allowed Special Characters 10 active

📋 Quick Pick Batch & Bulk Export

⚠️ Plaintext & Import Note: Exporting saves unencrypted passphrases to disk. Use .TXT when importing into password managers (exact raw strings, one per line). In .CSV, cells starting with =, +, -, or @ are prefixed with a literal ' to prevent spreadsheet formula execution.

🎲 Physical Diceware Mode (Roll Real 6-Sided Dice) 5 Rolls per Word (11111–66666)

Want hardware-free air-gapped randomness? Roll physical 6-sided dice on your desk and click or type the faces (1–6). Every 5 dice rolls maps to 1 word from the full 7,776-word EFF list (12.9 bits/word) and inserts it into your passphrase!

Dice Lookup Preview —

Roll 5 dice (1–6) to preview word

Words rolled so far: None (clicking 5 dice automatically pushes the word into your main passphrase).

🧪 "Test Your Own Password" Strength Comparator 100% Local • Heuristic Pattern Estimator

Curious how a traditional password (like Tr0ub4dor&3 or Summer2026!) stacks up against your current CorrectStaple passphrase? Type a sample pattern below (do not enter real live passwords) to compare estimated pattern entropy and crack resistance side-by-side:

🔍 Tested Password Pattern-adjusted

Effective Entropy: —

Offline Slow Hash (100k/s): —

Offline Raw GPU (100B/s): —

🛡️ Active CorrectStaple Passphrase CSPRNG Dictionary

True Entropy: —

Offline Slow Hash (100k/s): —

Offline Raw GPU (100B/s): —

💡 Why XKCD #936 + Numbers & Symbols Works 🖼️ Read Original Comic (xkcd.com/936) ↗

❌ Traditional Mangled Password

Tr0ub4dor&3

Hard for humans to remember (Is the 'o' a zero? Is the 'a' a 4?), yet familiar substitution patterns give only ~28–40 bits of real resistance against modern GPU cracking rigs.

✅ XKCD Word + Number + Symbol

Correct-Horse-Battery-Staple84!

Chosen uniformly at random from 7,776 distinct words using your browser's cryptographic RNG (crypto.getRandomValues), plus random digits and symbols to satisfy strict site complexity rules while exceeding 60+ bits of true entropy.