Replace the sticker password
Router default keys are often short or built from patterns that cracking tools know, and the label is seen by every visitor, technician and roommate. Change it on day one.
Create a WPA2/WPA3 key that holds up against handshake cracking, then turn it into a QR code: guests point their camera and they are online. No typing, no spelling out l or 1, and nothing leaves this tab.
Password
Calculating…
Letters and digits only by default: easy to type on a TV, a console or a printer, and still out of reach at 20 characters.
Random words are easy to read out to a guest or type on a remote. Use 5 words or more.
Three steps
Pick random characters or random words above. To keep your current password, choose My own: the tool only builds the QR code and tells you how strong it is.
Open your router page (often 192.168.0.1 or 192.168.1.1) or your internet provider's app, go to the wireless security settings, choose WPA2-PSK (AES) or WPA3-Personal and paste the new password.
Print the card or save the QR code as an image. Stick it inside a cupboard, on the fridge or in your rental welcome book, not in a window facing the street.
Why it matters
Anyone in range can record the moment a device joins your network (the WPA2 handshake), go home, and test billions of guesses offline. No lockout, no alert. Here is how long that takes for a GPU rig testing 10 million guesses per second.
| Wi-Fi password | Entropy | Time to crack a captured handshake |
|---|---|---|
| 8 digits | 27 bits | 5 seconds |
| 8 lowercase letters | 38 bits | 3 hours |
| 8 letters and digits | 48 bits | 4 months |
| 5 random words and a number | 63 bits | 16 thousand years |
| 12 letters and digits | 70 bits | 1.5 million years |
| 20 letters and digits (the default here) | 116 bits | 1.5 × 1020 years |
These figures assume a truly random password. A name, a date or a word with a few digits (like Sunshine2024!) falls in minutes to the word lists every cracking tool ships with.
Good habits
Router default keys are often short or built from patterns that cracking tools know, and the label is seen by every visitor, technician and roommate. Change it on day one.
Most routers offer a guest network. Put visitors, smart TVs and connected gadgets there with their own password, and keep your computers and storage on the main one.
The push-button and PIN pairing feature called WPS has a long history of flaws. A QR code is just as convenient for guests, so you can switch WPS off in the router settings.
Install firmware updates, change the router admin password too, and turn off remote administration unless you really need it. Then check that the admin password never leaked.
Questions
It stores your network name, security type and password in a standard format (WIFI:T:WPA;S:name;P:password;;) that phone cameras understand. When a guest scans it, the phone offers to join the network, with nothing to type.
iPhones and iPads with iOS 11 or later read it from the Camera app. Android 10 and later read it from the camera or from the QR icon in the Wi-Fi settings, and older Android phones can use Google Lens.
On this page, yes: the password and the QR code are created by JavaScript in your tab and never sent anywhere. You can even disconnect from the internet once the page is loaded. Be careful with QR generators that build the code on their server, because they receive your password.
WPA2 accepts 8 to 63 characters. Use at least 12 random characters or 5 random words. This tool defaults to 20 random letters and digits, which is easy to type on a TV and far beyond the reach of any cracking rig.
Choose WPA3-Personal if all your devices support it, or the WPA2/WPA3 mixed mode if some are older. WPA3 blocks offline guessing of the handshake, but devices that still connect with WPA2 rely on the strength of the password. The QR code is the same for both.
Not really. A hidden network name still shows up in the traffic of the devices that connect to it, and hidden networks are slower to join. If you hide yours anyway, turn on the Hidden network option so the QR code tells phones to look for it.
It is better to create a guest network on your router, with its own password, and print the card for that one. Guests stay away from your computers, cameras and storage, and you can change the guest password without reconnecting all your devices.
Random passwords, passphrases or PINs, created by the Web Crypto API on your device.
Open toolRandom words you can actually remember, with the entropy of a 16-character password.
Open toolSee your password the way an attacker does: patterns, entropy and four crack-time scenarios.
Open toolFind out if a password already leaked, without ever revealing it (k-anonymity).
Open toolNIST, PCI DSS and CIS presets with ready-to-run Windows, Active Directory and Linux scripts.
Open toolHow long every length and character mix survives a modern GPU cracking rig.
Open tool