Passphrase generator

Passphrases (eg: case-knee-bat-grape) are great. In almost every sense they are far better than passwords made from 6-8 hard to remember symbols, eg: a6h%S\9F. They are both stronger and so harder for computers to crack, and easier to remember by humans. Their strength comes from their length which gives then a high entropy.

So to help me I made my own passphrase generator. This is going against the normal advice in security that that it's dangerous to implement things yourself as you may get it wrong, but for something as simple as this it's fine.

This implementation picks as many random words as you want from a list of 7512 3-5 letter english words. The addition of capital letters and trailing numbers is optional but is enabled by default.

The minimum length of a passphrase generated with the default settings is 20 characters and uses a large range of characters, so if you tried to naively brute force one there would be 63^20 = 2^120 possibilitie. Even if you know the format then there are still 7512^4 * 10000 = 2^64 possibilities.