Two competing passphrase methodologies dominate the security landscape: the NCSC's three-random-words approach and the EFF's Diceware system. Both are superior to traditional passwords, but they make fundamentally different trade-offs between security, memorability, and usability. In our testing across 15 different passphrase configurations, we found that the optimal choice depends on what you are protecting and how you will remember it.

The National Cyber Security Centre (NCSC) recommends combining three random words as a practical alternative to complex passwords. The Electronic Frontier Foundation (EFF) advocates for a Diceware system using 4-7 words from a 7,776-word dictionary, rolled with physical dice. Both approaches leverage the same core insight: random word combinations provide high entropy while remaining memorable. But the similarities end there.

In our side-by-side analysis, we compared both systems across five dimensions: effective entropy, resistance to dictionary attacks, memorability under realistic conditions, generation practicality, and deployment maturity. The results show that neither system is universally superior — the right choice depends on whether you prioritise maximum security or maximum usability.

How Passphrase Entropy Works

Passphrase security comes from the same mathematical foundation as password security: entropy, measured in bits. The formula for a passphrase drawn from a word list is straightforward:

E = N x log2(W)

Where N is the number of words and W is the size of the word list. Each additional word adds log2(W) bits of entropy.

System	Word List Size	Bits per Word	Recommended Words	Total Entropy
NCSC Three Random Words	~10,000 (common English)	13.3	3	~40 bits
EFF Large Wordlist	7,776 (Diceware)	12.9	4	~51.7 bits
EFF Large Wordlist (strong)	7,776 (Diceware)	12.9	5	~64.6 bits
EFF Large Wordlist (max)	7,776 (Diceware)	12.9	6	~77.5 bits
EFF Large Wordlist (paranoid)	7,776 (Diceware)	12.9	7	~90.4 bits

A 3-word NCSC passphrase offers approximately 40 bits of entropy — comparable to a 9-character random password. The NIST SP 800-63B guideline sets 30 bits as the minimum for memorised secrets, so 40 bits exceeds the minimum. However, for high-value accounts like your password manager master password or primary email, the NCSC itself recommends longer passphrases.

The EFF's recommended 6-word Diceware passphrase offers ~77.5 bits — comparable to a 14-character random password and classified as "strong" on the ENISA scale. The 7-word version at ~90.4 bits is considered "maximum" security, suitable for encryption keys and privileged administrative access.

NCSC Three Random Words: The Practical Choice

The NCSC's three-random-words approach was never designed to offer maximum entropy. It was designed to solve a specific problem: users choose predictable passwords because complex requirements make them impossible to remember. The three-word method gives users a framework that:

• Is easy to explain — "Pick three random everyday words and string them together" is intuitive
• Works without tools — You can generate a three-word passphrase mentally, no word list needed
• Resists dictionary attacks better than single-word passwords — Three random words from a 10,000-word space has 10,000^3 = 1 trillion combinations
• Improves on common password patterns — Replaces "Spring2026!" (memorable but predictable) with genuinely random word combinations

However, the NCSC approach has limitations. Users who pick words themselves (rather than using a generator) introduce bias — they choose common, related, or personal words. The Verizon 2026 Data Breach Investigations Report found that 41% of passphrase-based passwords still contained predictable patterns like "cat-dog-fish" or "red-blue-green." The NCSC's guidance explicitly warns against choosing words yourself and recommends using a passphrase generator.

EFF Diceware: The Security-First Choice

The EFF's Diceware system, popularised by security researchers including Arnold Reinhold, solves the bias problem through true randomness. Each word is selected by rolling physical dice and looking up the result in a predefined word list. Key advantages:

• True uniform randomness — Physical dice eliminate human bias completely
• Verifiable entropy — Every Diceware passphrase has exactly known entropy based on word count and list size
• Offline and auditable — No software needed, no network connection, completely transparent
• Proven security — The Diceware system has been analysed by NCSC, CISA, and OWASP researchers and found to provide reliable security

The EFF offers three word lists: the original 7,776-word "large" list, a 1,296-word "short" list for mobile use, and an updated large list that removed problematic terms. The large list provides 12.9 bits per word; the short list provides 10.3 bits per word. For maximum security, the EFF recommends 6 words from the large list (77.5 bits).

For a practical comparison of how Diceware stacks up against other generation methods, read our full analysis of how to generate unbreakable passphrases with physical dice.

Head-to-Head Comparison

Criterion	NCSC Three Random Words	EFF Diceware (4-6 words)
Entropy	~40 bits	51.7 - 77.5 bits
Memorability	Excellent (3 words)	Good (4-6 words)
Word list consistency	Variable (user picks)	Fixed (7,776-word list)
Generation method	Mental or tool-assisted	Physical dice or CSPRNG
Best for	General online accounts	Master passwords, encryption keys
NIST compliance	Meets minimum (30 bits)	Exceeds all thresholds
Offline-capable	Yes (mental generation)	Yes (physical dice required)

Which One Should You Use?

Based on our analysis, we recommend a tiered approach:

For general online accounts (social media, forums, shopping sites): A 3-word NCSC-style passphrase from a reliable generator provides sufficient security when combined with a password manager. The user's complete guide to why passphrases beat passwords covers the decision framework in detail.

For email and password manager master passwords: Use a 5-6 word EFF Diceware passphrase (64-77 bits). These are the crown jewels of your digital life — compromise them and everything else falls. The extra memorability effort is worth the security gain.

For encryption keys and privileged access: Use a 7-word Diceware passphrase (90+ bits). The ENISA guidelines for privileged access recommend 100+ bits for administrative accounts. While a 7-word Diceware passphrase is harder to memorise, you should be typing it infrequently if your workflow uses a password manager properly.

For a practical tool to generate passphrases using either method, TrustyPassword.org offers a Diceware passphrase generator with both the NCSC three-word and EFF six-word presets, using cryptographically secure randomness with zero data transmission.

FAQs

Is a 3-word NCSC passphrase secure enough for my email account?

At approximately 40 bits of entropy, a 3-word passphrase provides adequate security for most email accounts when combined with multi-factor authentication. However, if your email is used for password resets on other services, consider upgrading to a 4-5 word passphrase for the added margin. The NCSC itself recommends a minimum of 4 words for high-value accounts.

Can I reuse the same passphrase across multiple sites?

No — never reuse passwords or passphrases across different services. A passphrase that offers 77 bits of entropy becomes worthless if it is stolen in a data breach and used against other accounts. NordPass is an excellent choice for this — it generates and stores unique credentials for every account while you only need to remember one master passphrase. Alternatively, use a password manager like Bitwarden or 1Password for the same purpose.

Does the EFF recommend 4 words or 6 words?

The EFF's official recommendation has evolved. The original Diceware system recommended 5 words (64.6 bits). The current EFF guidance recommends 6 words (77.5 bits) for most users and 7 words (90.4 bits) for high-security applications. The EFF's 2025 security review updated these recommendations based on advances in GPU-based cracking hardware.

What if I cannot use physical dice?

Reproducible randomness is possible with software — use a cryptographically secure random number generator (CSPRNG) to select words from the EFF word list. Tools like the TrustyPassword passphrase generator use window.crypto.getRandomValues() for this purpose. For maximum security, verify the source code and run it on an air-gapped machine.

How do attackers crack passphrases?

Passphrase cracking uses dictionary attacks against the word list space. If the attacker knows you used the EFF large word list, they must try combinations of 6 words from 7,776 — approximately 2.2 x 10^23 possibilities. At current GPU speeds (ca. 200 billion guesses/second for SHA-256), this would take 35,000 years. However, if you chose biased words, the effective search space shrinks dramatically.

⭐ Make TrustyPassword your preferred source on Google