A key nobody can
guess or reset.
Generated on your device using your browser's cryptographic randomness. It is never sent anywhere, never stored, and never seen by us. Turn off your connection first if you want to be certain.
Copied. Paste it somewhere safe before you close this page.
What to use this for
This is not only for SOVRAN. A passphrase like this is the right lock for anything where being locked out is survivable but being broken into is not. Generate a different one for each of these — never reuse.
- Your email account, firstEvery other password you own can be reset through your email. It is the master key to your entire life online, and most people protect it worse than their Netflix. Change this one today.
- Your password managerThe one password you actually have to remember. It guards every other credential you own, so it should be the strongest thing you type all year.
- Your bank and anything financialWhere the loss is money and the recovery is months of paperwork.
- Your phone and laptop encryptionA six-digit PIN is guessable. Full-disk encryption with a real passphrase is what makes a stolen laptop worthless to the person holding it.
- Wi-Fi at homeYour router password is probably printed on a sticker on the router. Anyone who has been in your house has had the chance to photograph it.
- Encrypted backups and archivesIncluding the social media export you downloaded for The Audit — that file is the single most complete document about you in existence, and it is probably sitting unprotected in your Downloads folder right now.
- Anything with no resetCrypto wallets, encrypted vaults, and accounts like this one. If nobody can recover it for you, the passphrase is the only thing standing between you and permanent loss in both directions.
Why not just a long sentence?
This is the most common and most reasonable-sounding mistake in password advice, so it is worth being precise about. A fifteen-word sentence you invented, with capital letters in odd places and punctuation sprinkled through, feels far stronger than six random words. It is usually much weaker.
| Approach | Strength | Why |
|---|---|---|
| A sentence you made up 15 words, mid-word capitals, punctuation |
Weak to moderate | Human sentences follow grammar, so each word narrows the next. And people mangle text predictably — capital on the first or second letter, a becomes @, exclamation mark at the end. Cracking software models these substitutions directly; they are among the first things it tries. |
| Six truly random words from a 7,776-word list |
Very strong | No grammar, no pattern, nothing to narrow the guess. Every word is one of 7,776 possibilities chosen by a cryptographic random number generator. That is about 78 bits of entropy — beyond any realistic attack. |
This is the same method the Electronic Frontier Foundation recommends, using their published word list of 7,776 short, common, unambiguous words. Six words is the sensible default. Use seven or eight if you are protecting something that would ruin your year.
How to actually keep it
- Generate it, then read it out loud twice. These words are chosen to be easy to say and hard to confuse. Saying it is how it starts to stick.
- Write it on paper. Actual paper, in your handwriting. Paper cannot be hacked from another country, and there is a reason serious people still use it.
- Put the paper somewhere you would keep a passport. Not under the keyboard. Not in a drawer at work.
- Or put it in a password manager — but never in the one this passphrase unlocks. That is a locked box with the key inside.
- Never email it, text it, or put it in a note that syncs to a cloud you do not control.
- Give a sealed copy to someone you trust if losing it would be catastrophic. An envelope with a family member is a legitimate backup strategy.