Pronounceable Password Generator
Random passwords built from speakable syllables — easy to read aloud, easy to type, with the strength meter telling you exactly what the readability costs.
Click to copy
Some passwords have to survive a trip through a human voice or a clumsy keyboard: dictated over the phone, typed from paper into a TV, keyed into a server console with no clipboard in sight. A fully random string like k9P$wq2Zmf3v fails that trip constantly. A pronounceable password — alternating consonants and vowels into syllables, like Tabemukilosaviro42 — survives it, because your mouth and eyes process syllables natively.
The honest part: structure costs entropy. Each letter here carries about half the bits of a full-charset random character, which is why this generator defaults to 20 letters and shows you the exact entropy and crack-time as you adjust. At 20 letters with the digit suffix you have roughly 72 bits — thousands of years against offline cracking — and every added syllable buys a comfortable margin. No dictionary words are involved, so wordlist attacks get no shortcut; an attacker who knows the exact pattern still faces the full random keyspace the meter reports.
Every password is generated locally with crypto.getRandomValues() — nothing is transmitted, logged, or stored. If your actual goal is a password you can remember rather than pronounce, the memorable and three-random-words generators solve that problem with real words.
Frequently Asked Questions
What is a pronounceable password?
A random password built from alternating consonants and vowels, so it reads as syllables — something like Tabemukilosaviro42 — instead of line noise. It contains no dictionary words: every letter is chosen by a cryptographic random generator, but the structure makes it speakable and far easier to transcribe.
Is a pronounceable password as strong as a fully random one?
No — the syllable structure roughly halves the entropy per character, about 3.2 bits per letter versus 6.5 for a full random character set. The fix is length: 20 pronounceable letters plus two digits reach about 72 bits, comparable to an 11-character fully random password. Add length until the strength meter satisfies you.
How long should a pronounceable password be?
Twenty letters or more. At 20 letters with the two-digit suffix you get about 72 bits of entropy — thousands of years of offline cracking — and 24 letters push past 80 bits. Treat 16 letters as the floor for low-stakes accounts, not a target.
When is a pronounceable password useful?
Whenever a password travels by voice or eye: reading a credential to a colleague on a call, typing one from a printed sheet, entering it with a TV remote or game controller, or support scenarios where someone must dictate a temporary password. For secrets that only live in a password manager, use a fully random password instead.
How does the generator work?
It alternates a consonant set (18 letters, ambiguous sounds removed) with the five vowels, choosing every letter with the browser’s crypto.getRandomValues(). Optionally it capitalizes the first letter and appends two random digits to satisfy composition rules. Everything runs locally — nothing is transmitted, logged, or stored.
Pronounceable password or memorable words — which should I pick?
Pick by problem: pronounceable passwords optimize for saying and transcribing, word-based memorable passwords optimize for remembering. A pronounceable string is still random gibberish you will not retain next week. If the goal is a password you can hold in your head, use the memorable or three-random-words generator instead.
More tools
Written & reviewed by Andrew Ivanov, Fractional CTO. Last reviewed .