Home / Wi-Fi Password Generator

Wi-Fi Password Generator

Strong keys for your router — readable enough to type, random enough to trust.

…

STRENGTH—

—Length

—Entropy

—Crack Time

—Pool

Mode

How it works

A router's default key is often weak or printed on a sticker. This tool generates a strong Wi-Fi password for WPA2 and WPA3 networks. Strong mode gives a 20-character random key; readable mode builds a hyphenated four-word key that is easy to read aloud or type into a smart-TV; 64-hex mode outputs a full pre-shared key at maximum strength.

The key is generated in your browser with the Web Crypto API and is never sent anywhere. Set it in your router's admin page, prefer WPA3 or WPA2-AES, and give guests a separate network instead of your main key.

How to set it on your router

Connect to the router and open its admin page — usually 192.168.1.1, 192.168.0.1 or the address printed on the device.
Sign in. The admin password is not the Wi-Fi password; if the admin one is still the factory default, change that too.
Go to Wireless / WLAN settings and replace the pre-shared key / password. Save, then reconnect your devices.

WPA2 or WPA3?

Choose WPA3 if every device supports it; otherwise WPA2 with AES (CCMP), or WPA2/WPA3 mixed mode for older gear. Never use WEP or WPA/WPA2-TKIP — both are broken. Put visitors and smart-home devices on a separate guest network so a compromised gadget can't reach your computers.

Related terms: Brute force · Dictionary attack · Entropy

FAQ

How long should a Wi-Fi password be?

At least 16 characters of random text, or four or more random words. WPA2/WPA3 allow up to 63 characters — there is no reason to stay short.

What is the 64-character hex option?

It is the raw 256-bit pre-shared key that WPA derives from a passphrase. Some routers accept it directly; it removes any weakness from a short passphrase but is impractical to type by hand.

Do I need to change my Wi-Fi password?

Change it if it is the factory default, printed on the router, short, or was ever shared widely. Otherwise only after an untrusted device had it.