Choose the word list for passphrases

Hi @jero the team does its best to keep on top of messages. custom word lists is something to consider for the future, although there is no near term plan at the moment. the current recommendation would be to use the built in passphrase generator and make manual adjustments if needed.

@go12 Did I remember correctly, that @kspearrin at some point expressed that there was some technical reason that would stand in the way of changing the hardcoded word list?

@grb that could be. will check

1 Like

Evidently, there have been recent developments that are driving Bitwarden to currently undertake an effort to modify to word lists used for passphrase generation. This seems to present an excellent opportunity for Bitwarden to provide support for some of the ideas in this Feature Request thread (ideally, support for user-supplied custom word lists).

Thus, I am bumping this thread in an effort to give this proposal higher visibility during this critical moment in time.

the current recommendation would be to use the built in passphrase generator and make manual adjustments if needed.

A better and safer recommendation imho would be: If you are not comfortable in English on a native level, try finding a passphrase generator in your language until Bitwarden supports generating passphrases in languages other than English. It’s so much tougher to memorize a passphrase in a foreign language, that this can not be safely recommended to everyone. Right now the generator is useless for many people that have other native languages.

Unfortunately it’s not easy to find good multi-language passphrase generators. So right now probably the best bet is to use 5 dices and a list like wordlists-de/de-7776-v1-diceware.txt at main · dys2p/wordlists-de · GitHub

If anyone knows a good multi-language passphrase generator, please feel free to recommend it here.

edit: Found this tool, which has several lists: Diceware Secure Passphrase and Password Generator

@DonkeeeyKong Welcome to the forum!

Aaron Toponce’s WebPassGen site has six different passphrase generators, three of which (“Alternate”, “Cryptocurrency”, and “Diceware”) offer word lists in languages other than English.

If you are going to use dice to roll your own passphrases, then you can download diceware lists in multiple languages from Reinhold’s original Diceware site.

1 Like

Passphrases are great, but most of the world does not easily memorize English words. Passphrases in Locale (language used by the OS) would improve the user experience and the security feature itself. Assuming that developers will not be able to find word databases in all languages at least starting with a few common languages would help.

1 Like

@grb Thank you for the kind welcome. And thanks a lot for the links. In the meantime I have taken this opportunity to practice some scripting and created my own bash script to generate passphrases from any diceware compatible word list. :smiley: