Passy Pie
Passwords you can picture.
🇬🇧
AI
-
Build your recipe
Pick the parts that go into the phrase. Tap once to add, again to add another of the same kind. Tap the × on any pill below to remove it.
Pick at least one slot above — the order is the order they'll appear.
Time
Quantity
Measure
Specific
Your password

How it works

1

Build the recipe

Pick the parts you want in the phrase — an adjective, a noun, maybe a verb. The order you tap is the order they appear, and the chips can be tapped multiple times for two adjectives or two nouns.

2

Random words

One word is picked from each chosen slot using a cryptographically secure random generator. Spelling is converted to your selected dialect before the words leave the server.

3

AI polish

An AI welds those raw words into the shortest possible vivid phrase, adding only articles, pronouns, prepositions, and any number you asked for. The output is validated to make sure it doesn't invent extra nouns.

4

Picture it

Once you find a phrase you love, an AI generates a unique illustration of it. Your brain stores images far more reliably than text.

Why pictures beat passwords

Cognitive scientists call it the picture superiority effect. Read a word and you have roughly a 10% chance of recalling it three days later. See an image and that jumps to 65%. By pairing a passphrase with a matching illustration you engage two memory systems at once: verbal and visual. This is dual coding theory, first proposed by Allan Paivio in 1971 and one of the most replicated findings in memory research.

"Cromwell's first carving" is almost impossible to forget once you've seen a cartoon of it happening. Your brain stores a scene, a story, a moment. The words are just labels for something you can already picture.

The maths behind it

Password strength is measured in bits of entropy: how many guesses an attacker would need if they knew exactly how the password was generated. Each bit doubles the difficulty.

Passy Pie pulls from word lists totalling 10,000+ entries across seven categories: 3,069 nouns, 2,754 verbs, 2,277 adjectives, 721 adverbs, 465 places, 438 characters, 276 colours. Each slot you add to the recipe pulls from one of these lists at random; structural choices the AI then makes (article, preposition, conjugation, plural form, where the number lands) add another 10 to 15 bits on top.

PasswordEntropyVerdict
Password1~10 bitsCracked instantly
Fluffy2019!~18 bitsSeconds
A-messy-box~13 bitsCasual: hours
Marrakech-inspires-her~27 bitsGood: hours to days
Cromwell's-1st-carving~42 bitsStrong: weeks to months
Tiny-Zeus-juggles-cacti-wildly~55 bitsVery strong: years

Each slot you add roughly doubles the work an attacker has to do. By the time you're at four or five slots with a number, you're well into "warm side of the heat death of the universe" territory. And critically, you can still actually remember it.

🔒 Privacy and security

Passy Pie is designed so that nobody, including us, ever knows your password.

  • Custom words are sanitised server-side, stripping anything that isn't a letter, number, or hyphen. This prevents code injection, XSS, and prompt injection attacks.
  • Generated phrases are never stored on our server, in any database, or in any log file (unless explicitly enabled in development mode by the operator, which is off in production).
  • The generated image is never saved. It is created, sent to your browser, and discarded.
  • If you sign in with email, we store only your address, your saved favourites, and a session cookie. We never share, sell, or send marketing emails. One click in Settings deletes everything.
  • Random word picking uses Python's secrets module, the same primitive used for cryptographic keys.
  • Magic-link sign-in tokens are hashed before storage, expire in 15 minutes, and can only be used once.
  • Rate limiting protects against abuse: anonymous users get a generous daily quota; verified users get more. Sign-in requests are also rate-limited per IP.
  • Print previews open in a separate window that closes itself once printing is done.