Generate Passphrase

✨Zero dependency module for generating passphrase.

• 🚀 Simple passphrase generator with simple config
• ✨ ESM support
• 🔑 Cryptographically secure
• 📕 Built-in Typescript typings
• 🎊 Supports Node.js 10 and higher

The code is close to node generate-password repo. But this is for a passphrase, with English language.

ProtonMail has a decent article explaining about password vs passphrase.

Is this secure? Yes. I don't use Math.floor, I used the crypto module.

Why is this repo heavy? I'm using sindresorhus' word-list repo for fetching the English word list. If you have a better idea/workaround for this, feel free to open up an issue and file a PR! I'll gladly accept any feedbacks.

Installation

$ npm install generate-passphrase
# or
$ yarn add generate-passphrase
# or basically any package manager you like.

How to use this?

import { generate, generateMultiple } from 'generate-passphrase'
// or
const { generate, generateMultiple } = require('generate-passphrase')

const passphrase = generate();
// 'provoke-goddesshoods-26-staghorns'
const anotherPassphrase = generate({ length: 3, separator: '.', titlecase: true }) 
// see available options below

const multiplePassphrase = generateMultiple(3)
// ['pinocytotically-loricated-prithee-hypnotizer', 'sambaing-phenotypically-singlesticks-239', ... ]
const anotherMultiplePassphrase = generateMultiple(10, { length: 2, uppercase: true, numbers: false })

I know some of us need to generate it fast just for the sake of it, you can add fast as a parameter. (It defaults to false). Please bear in mind, this would make the returning random passphrase not cryptographically secure

const fast = generate({ fast: true })
// cultivars-strigose-avisements-58

const extraFast = generateMultiple(5, { fast: true })
// ['extrorsal-169-resultlessness-168', 'postmodern-kolkhozniki-skulkers-99', ... ]

Options

| Key | Type | Default | | --- | --- | --- | | length | integer | 4 | | separator | string | '-' | | numbers | boolean | true | | uppercase | boolean | false | | titlecase | boolean | false | | pattern | string | null | | fast | boolean | false |

A few things to note:

• Uppercase is more prioritized than titlecase. So if you have both options set to true, it will be words full of uppercase.
• Pattern option is more prioritized than length, because you've set the passphrase pattern, hence the module is using the length from your pattern.

Benchmark a.k.a How slow is this?

~~TL;DR: It's slow.~~ On v1.1.0, I managed to get the algorithm runs a lot faster. There is also an additional fast option if you're just aiming for the speed.

I'm using:

• Asus ROG GL553VE
• Windows 10 Home 64-bit (10.0 Build 18363)
• Intel Core i7-7700HQ @ 2.80GHz, 8 CPUs
• 16 GB RAM

Benchmark for single passphrase/password:

| Module | Ops/sec | Accuracy | Runs sampled | | --- | --- | --- | --- | | generate-passphrase | 117,546 | ±2.32% | 385 | | generate-passphrase (fast enabled) | 653,668 | ±1.07% | 444 | | generate-password | 434,495 | ±1.49% | 332 | | niceware | 207,719 | ±5.79% | 232 | | randomatic | 8,026 | ±2.23% | 319 |

Benchmark for multiple passphrase/password (generateMultiple function):

| Module | Ops/sec | Accuracy | Runs sampled | | --- | --- | --- | --- | | generate-passphrase | 12,338 | ±1.80% | 407 | | generate-passphrase (fast enabled) | 64,124 | ±1.51% | 441 | | generate-password | 43,775 | ±2.15% | 317 |

Contributing

Yes please.

License

MIT