wuerfel

Diceware password generator cli based on eff password lists.

Installation

Scoop (Windows)

scoop bucket add stupid-bucket https://github.com/WyvernIXTL/stupid-bucket
scoop install stupid-bucket/wuerfel

Homebrew (MacOS/Linux)

Tip

Shell completions are included! See the Homebrew Documentation on how to activate them.

brew install wyvernixtl/tap2/wuerfel

NPM (Windows/Linux/MacOS)

Note

An install script is used that removes temporary directories. Thus this method is not compatible with restrictive environments (pnpm/deno).

npm install -g @wyvernixtl-rs/wuerfel

Prebuilts (Windows/Linux/MacOS)

are available on the release page.

Binstall (Windows/Linux/MacOS)

cargo binstall -y wuerfel

From Source

Via Cargo:

cargo install wuerfel

Usage

By default a password with at least 90 bits of entropy is generated:

wuerfel
# word count: 9
# entropy: 93.1 bits
# emu rerun film donor drab ride coat ruby grasp

To generate a stronger password you may use either the --count or the --entropy options:

wuerfel --count 12
wuerfel -c 12
# word count: 12
# entropy: 124.1 bits
# case walk tummy blink open shore thaw curl nutty tilt tall found

wuerfel --entropy 256
wuerfel -e 256
# word count: 25
# entropy: 258.5 bits
# self fried sled humid quilt fancy baker dad spend hers strut spoof shiny shirt stoop slush alarm brick sway plot lying cub acorn musky aroma

To copy the password to your clipboard, instead of printing it to the terminal, use the --cb flag:

wuerfel --cb
# word count: 9
# entropy: 93.1 bits
# clipboard is going to be deleted in 10s
# clipboard cleared!

Three wordlists are included:

• EFF Short Wordlist (default)
• EFF Long Wordlist
• EFF Short Memorable Wordlist

wuerfel -l short
wuerfel -l long
wuerfel -l memorable

I recommend at least 110 bits of entropy for encryption purposes and at least 80 bits of entropy for authentication purposes.

More is better!

Security

• The wordlists stem from EFF and are unaltered. They are parsed at compile time and embedded into the program.
• The random number generator is seeded by the operating system.
• The generated password is stored in a locked memory location on windows and unix and encrypted in memory on windows.
• The wordlists are cleared after use.
• All allocations are zeroized.