HubTools

WiFi Password Generator

Generate a 16-character WiFi password with no confusing symbols. Easy to share, hard to crack.

What makes a good WiFi password?

A good WiFi password balances two opposing needs: it has to resist offline brute-force attacks against the captured WPA2/WPA3 handshake, and it has to be typable by guests on a phone keyboard. A 16-character password drawn from upper, lower, digits, and a small symbol set gives roughly 95 bits of entropy — far past the threshold modern GPUs can crack against WPA2's slow PBKDF2-SHA1 key derivation. This generator excludes brackets, slashes, and pipes by default so the result can be read off a fridge magnet without ambiguity. Generation is computed locally on your device via crypto.getRandomValues() — no signup, no upload, no tracking.
Generated Password
Enable at least one character type
Strong
99.4 bits of entropy
Charset: 74 chars
Estimated crack time: centuries+(10 billion guesses/sec)
Bulk Generation
Count:
Options
Password Length16
4128
Character Types
Uppercase
(A-Z)
Lowercase
(a-z)
Numbers
(0-9)
Symbols
(!@#$%^&*_+-=)
Exclusions
Exclude Similar
(i,l,1,L,o,0,O)
Exclude Ambiguous
{}<>[]()/\|
Quick Presets

About WiFi passwords

WPA2 and WPA3 derive keys from your password via PBKDF2-SHA1 (4096 iterations, salted with the SSID), so password entropy is the dominant cost factor for an attacker.
  • WPA2/WPA3 minimum: 8 characters; recommended: 16+
  • Attackers brute-force the captured 4-way handshake offline at ~1 million guesses/sec on consumer GPUs
  • 16 random characters from the safe set ≈ 95 bits — infeasible to crack
  • Avoid words from any dictionary — wordlists are the first attack tried
  • Rotate the password if you ever read it aloud near an unknown microphone

Frequently asked questions

How long should a WiFi password be?
16 characters with mixed character classes is the sweet spot. WPA2's brute-force resistance comes from PBKDF2 key stretching plus password entropy; 12 characters is borderline against well-funded attackers, 16 is comfortable for at least a decade, and beyond 20 is overkill for almost any home or small-office network.