Diceware is a method for generating strong passphrases by rolling physical dice against a published wordlist. Created by Arnold Reinhold in 1995. The standard EFF Long Wordlist (7,776 words) yields around 12.9 bits of entropy per word; six words yields approximately 77 bits, seven words yields 90 bits, the threshold above which offline brute-force becomes infeasible regardless of attacker resources. The technique adopted by privacy-aware users for the small number of passphrases that must be memorized.
What it means in practice
The structural value of Diceware over user-generated passphrases is the elimination of human bias from the entropy calculation. A user-generated “memorable” passphrase (“MyDog!sCute2010”) looks complex but draws from a small space of patterns that brute-force tools optimize against. A Diceware passphrase (“envoy unboiled blissful gigabyte parchment shorten”) is in a much larger space and resists optimization because no pattern exists. The trade-off: Diceware passphrases are harder to remember on first encounter (random word combinations have less semantic anchor than user-chosen passwords), and the discipline is to practice typing the passphrase 30-50 times in the first week to build muscle memory. The output works for the small number of passphrases that matter most: master password of password manager, full-disk encryption, GPG private-key passphrase, vault-tier secrets that the user must memorize.
Where it shows up
Recommended by: EFF (publishes the canonical wordlists at eff.org/dice), Bruce Schneier in published recommendations, the entire 1Password and Bitwarden documentation framework when explaining master-password choice, and the broader privacy-aware community as the default mechanism for the must-memorize passphrase tier. The 1Password “Secret Key” architecture is partly designed to reduce the burden on the master password by adding a separate cryptographic key, but a strong master passphrase remains the discipline. Used in: master-password generation, full-disk-encryption setup, GPG key-passphrase generation, and the few accounts where 2FA is unavailable and the password is the only barrier.
What you can change today
Generate a new master passphrase this week if your current is shorter than 5 random words or contains words you chose for memorability. Get five real dice (any standard six-sided dice work, fair if reasonably worn). Roll five dice, look up the resulting 5-digit number on the EFF Long Wordlist (eff.org/dice), record the word. Repeat 5-7 times for a 5-7 word passphrase. Write the passphrase on paper, store the paper in a fireproof safe or off-site location until you have memorized it. Update your password manager master password, full-disk encryption password, and any other vault-tier secret. Practice typing the passphrase 30-50 times over the next week so muscle memory builds; the only secret you cannot afford to forget under stress is the one you never developed muscle memory for.