Generate a Secure WiFi Password

WiFi Password Security

WiFi passwords (Pre-Shared Keys or PSKs) have different security considerations than online account passwords. There is no server-side rate limiting — an attacker who captures a WPA2 handshake can attempt offline brute-force attacks at high speed.

WPA2 vs WPA3

WPA2-PSK uses a 4-way handshake that can be captured and cracked offline. The password is hashed with PBKDF2-SHA1 (4096 iterations) using the SSID as salt. This makes offline brute-force feasible for short passwords.

WPA3-SAE (Simultaneous Authentication of Equals) uses a more secure key exchange that resists offline dictionary attacks. However, WPA2 is still far more common, so password strength remains critical.

Recommended WiFi Password Specifications

Length:     16-20 characters
Characters: Alphanumeric (avoid problematic symbols)
Format:     Groups of 4-5 for readability

Characters to Avoid in WiFi Passwords

Some characters cause issues with certain routers or devices:

• Quotation marks (" and ') — may break router configuration files
• Backslash (\) — escape character in many systems
• Ampersand (&) — URL-encoded in web admin interfaces
• Angle brackets (< >) — may be stripped by HTML-based router UIs
• Spaces — some older devices have trouble with leading/trailing spaces

Alphanumeric passwords with a few safe symbols (-, _, .) work reliably across all devices.

Making WiFi Passwords Shareable

Since WiFi passwords are often shared verbally or printed on a card:

1. Avoid ambiguous characters: 0/O, 1/l/I, 5/S
2. Use grouping: kR9m-T2pX-7nQw-4bYs is easier to read than kR9mT2pX7nQw4bYs
3. Consider a QR code: generate a WiFi QR code that guests can scan

Example WiFi Passwords

Hx7k-Nm3p-Rw9t-Jb2v
qY4c-Lf8n-Xs6g-Dh1m

WPA2 Crack Time Estimates

Password Length	Alphanumeric	Time (10B/sec)
8 characters	62^8	~6 hours
12 characters	62^12	~200,000 years
16 characters	62^16	~8 x 10^12 years

A 12-character alphanumeric WiFi password is the absolute minimum. 16+ characters is strongly recommended.