Wi-Fi password
Long but typeable: no quotes, spaces or characters that break input on a TV or a remote control.
Space — new password · C — copy · M — hide
Password length
Character sets
Select at least one character set.
Passphrase settings
A 2048-word list gives exactly 11 bits per word (the Diceware method). Six words are 66 bits, eight are 88. The words are drawn by a cryptographic generator, not by a human — that is the whole point.
Password pattern
a — lowercase, A — uppercase, L — any letter, 9 — digit, # — symbol, X — letter or digit, * — any enabled character, c/v — consonant/vowel. Every other character is copied as is, \ escapes the next one.
Fine tuning
“Safe symbols only” keeps !@#$%^&*_-+=? — almost every site accepts them and they do not break shell commands, CSV or SQL.
Recent passwords (this tab only)
What happens to your password
The password is assembled in your browser from the cryptographic randomness source crypto.getRandomValues with rejection sampling, so every character is equally likely.
The page never sends passwords to a server, never writes them to browser storage and drops the history when the tab closes.
Password letter by letter
Phonetic spelling for reading a password out over the phone. Letter case is stated separately.
Why this way
A WPA2 key is cracked offline
An attacker does not have to guess over the air: capturing the handshake of any device joining the network is enough, and the guessing then happens on GPUs at leisure. That is why a short key such as “12345678” — the shortest WPA2 allows — falls in minutes.
A Wi-Fi key is typed rarely and usually stored inside devices, so length costs you almost nothing. Twenty-four letters and digits give about 130 bits, which covers any foreseeable future.
Special characters are better left off. TVs, consoles, printers and smart plugs often will not let you type a quote or a backslash, and some firmware silently truncates the key at the first awkward character — after which the network simply stops connecting for no visible reason.
While you are at it
Other things to fix on the router
Change the admin password. Factory admin/admin is public knowledge, and from inside the network the control panel is open to every connected device. Give it a separate 16-character password.
Turn WPS off. Its eight-digit PIN falls within hours no matter how strong your main key is.
Enable WPA3 if available. There a captured handshake is useless for offline guessing. A mixed WPA2/WPA3 mode keeps older gear working.
Set up a guest network. Visitors and smart bulbs then live apart from the computer holding your documents, and the guest key can be rotated as often as you like.
Reading the key out to a guest
Press the speaker button next to the readout and the service spells the password with the radio alphabet: “Sierra, dollar, November uppercase, seven.” Faster than explaining where the at sign lives on the keyboard.
Questions
Frequently asked questions
How long should a Wi-Fi password be?
WPA2 and WPA3 accept 8 to 63 characters. Take 20–24: the handshake can be captured and cracked offline on GPUs, and you will rarely type the key anyway.
Why turn special characters off?
TVs, consoles, printers and smart plugs often will not let you type quotes, backslashes or spaces, and some firmware silently truncates the key. Letters and digits at 24 characters beat 12 characters with punctuation.
Should I hide the network name?
A hidden SSID protects nothing: the name is visible on the air whenever a device connects. A long key, disabled WPS and a changed router admin password matter far more.
Next