Pronounceable Password Generator
Generate pronounceable passwords built from alternating consonant and vowel syllables, 12 to 32 characters long, drawn from the browser's crypto generator.
Loading tool…
How It Works
A pronounceable password generator builds a secret the way a language builds a word: one consonant and one vowel at a time, alternating, so the result can be read aloud and typed from memory. This page generates passwords between 12 and 32 characters long from those syllables, using the browser's cryptographic random source.
How a password is assembled. The generator builds syllables rather than whole words. Each syllable takes one consonant and one vowel, and the syllables alternate in a fixed pattern, which is what makes a string such as bafotimelura readable: every other letter is a vowel, so the reader can chunk it into pairs instead of memorising a random sequence of letters. A 12-character password is six syllables; a 32-character password is sixteen.
Where the randomness comes from. Each consonant and each vowel is chosen with crypto.getRandomValues, the same generator the browser uses for TLS session keys. There is no dictionary, no word list and no seeded pseudo-random fallback, so two passwords generated one after another are independent even if the page is reloaded between them. The choice of letter is made per position rather than by picking a whole syllable from a fixed table, so the same syllable does not recur predictably.
What pronounceability costs. Structure is the trade-off. A fully random 12-letter string carries at most log2(26¹²) ≈ 56 bits, and this generator stays below that ceiling because every letter is constrained by its position: an even position is a vowel, an odd one a consonant. The result is far easier to hold in memory and type on a phone, and correspondingly weaker per character than a random mixed-case string of the same length — a deliberate trade for secrets that must be remembered rather than stored.
What the output is not. It contains letters only: no digits, no symbols, no capitalisation, and no separator. Anything that imposes a symbol or number requirement will reject it, and those requirements should be met with the full password generator instead. The output is also not checked against a dictionary, so a syllable sequence that happens to spell something is still a legitimate draw.
Where it fits. Pronounceable passwords suit a Wi-Fi key you have to read to a guest, a password typed on a TV remote or a games console, and any shared secret that will be spoken aloud. For accounts behind a password manager, a fully random password is stronger at the same length.
How to use the generator
- Pick a length between 12 and 32 characters; 12 is six syllables and 32 is sixteen.
- Generate and read the result aloud once — if you can pronounce it, you can usually type it back.
- Store it in your password manager or write it down offline; the page does not keep the value.
- If the site demands digits or symbols, generate with the full password generator instead.
Pronounceable versus fully random
| Property | Pronounceable output | Fully random password |
|---|---|---|
| Alphabet | Letters, alternating consonant and vowel | Letters, digits and symbols |
| Length range | 12 to 32 characters | 4 to 64 characters |
| Entropy per character | Lower, because every position is constrained | Higher, because any allowed character can appear anywhere |
| Best used for | Secrets that must be spoken, memorised or typed on a remote | Secrets stored in a password manager |
Examples
Input
Length: 12Output
(12 letters, e.g. bafotimelura)Six consonant-vowel syllables; a fresh value on every run.
Input
Length: 16Output
(16 letters, e.g. bafotimeluravone)Eight syllables, still readable as one string when spoken.
Input
Length: 12 (minimum)Output
(12 letters, e.g. kodemarufisa)Boundary case: the shortest length the generator accepts — anything shorter is rejected rather than silently padded.
Input
Length: 32 (maximum)Output
(32 letters, e.g. bafotimeluravonekisadupemoratino)Boundary case: the longest accepted length — sixteen syllables, each one consonant then one vowel, counted to 32 characters.
Frequently Asked Questions
- What makes a password pronounceable?
- The letter pattern. Each syllable pairs one consonant with one vowel and the syllables alternate, so no position holds a hard-to-say cluster such as xkq or a run of vowels. The reader sees familiar pairs and can chunk the string into six or sixteen beats, which is what makes it possible to say aloud and type back.
- Is a pronounceable password as strong as a random one?
- No, at the same length. Constraining every position to a consonant or a vowel cuts the number of possible strings, so a 12-character pronounceable password carries fewer bits than a fully random 12-character one. It is still far stronger than a dictionary word, and the right choice when a human has to say or memorise the secret.
- Why are there no numbers or symbols?
- Because digits and symbols break the syllable pattern and make the result harder to pronounce, which defeats the point. Some services require at least one digit, and this generator does not add one. Use the full password generator for those sites, and keep this page for secrets you have to read aloud.
- How long should the password be?
- Use 12 to 16 characters for anything spoken once and typed immediately, such as a guest Wi-Fi key. Go to 24 or 32 when the password will be remembered for months and the extra length costs nothing, since the syllables stay equally sayable as the string grows.
Limitations & Accuracy
Output is letters only, with no digits, symbols or capitals, so sites that require them will reject it. Length is fixed between 12 and 32 characters, and the consonant-vowel pattern reduces entropy per character compared with a fully random password of the same length. There is no dictionary check, so a syllable sequence that happens to spell a word is still returned as generated. Values are never stored, so a password must be saved before the page is closed.