WiFi Password Generator

One click gives you a strong WPA2/WPA3 key plus a QR code guests can scan to join - No more reading 20 characters aloud.

Guest card
MyHomeWiFi

Scan with a phone camera to join instantly

How a WiFi Password Actually Gets Attacked

WiFi cracking doesn't look like the movies. Against WPA2, the standard attack takes four quiet steps:

  1. Listen - The attacker parks within range and records traffic. No connection to your network needed.
  2. Deauth - A forged "disconnect" frame kicks one of your devices off for a second. It reconnects automatically…
  3. Capture - …and the attacker records the reconnection handshake, which contains a hash derived from your password.
  4. Crack offline - At home, a GPU throws wordlists at that handshake at millions of guesses per second. Your router never sees a single failed login.

Two defenses break the chain: WPA3 (its SAE handshake can't be attacked offline) and entropy - A five-word key pushes the offline crack from hours to decades even on WPA2. That's why this generator defaults to both word-based strength and a QR code, so a strong key costs your guests nothing.

Securing Your Home Network

Router checklist

  • Use WPA3 (or WPA2-AES) - Never WEP or WPA-TKIP.
  • Change the admin password - The sticker default is in public databases; generate a random password for the admin panel too.
  • Disable WPS push-button - Its PIN mode is brute-forceable.
  • Use a guest network for visitors and smart-home gadgets.
  • Store the key in your Password Wallet and on a printed card.

How strong should a WiFi password be?

WPA2 handshakes can be captured and cracked offline, so aim for at least 60 bits of entropy: five random words or 12+ random characters. Word-based keys are far easier to type into a smart TV. The entropy guide shows the math, and the strength checker will grade your current key.

The QR code follows the standard WIFI: format that iOS and Android cameras understand natively - It never leaves your browser.

How to Use the WiFi Password Generator

1

Enter your network name

The SSID goes into the QR code so phones know which network to join.

2

Pick a style

Word-based keys are far easier to type into TVs and consoles; random-character keys are marginally stronger per character.

3

Update your router

Log into the router admin (usually 192.168.0.1 or 192.168.1.1), set the new key under Wireless Security, and choose WPA3 or WPA2-AES.

4

Print the guest card

The QR code lets guests join with a camera scan - No reading 20 characters aloud.

WiFi security protocols - What to use in 2026

ProtocolIntroducedStatusVerdict
WEP1997Broken - Cracked in minutesNever use
WPA (TKIP)2003BrokenNever use
WPA2 (AES/CCMP)2004Secure with a strong keyFine - Key strength is everything
WPA32018Current standard, resists offline attacksUse if your router supports it

WiFi Password Generator - FAQ

How long should a WiFi password be?
At least 60 bits of entropy: five random words or 12+ random characters. WPA2 handshakes can be captured and attacked offline at high speed, so the throttling that protects website logins doesn't exist here.
Does the QR code send my password anywhere?
No. The QR code is drawn entirely in your browser using the standard WIFI: format that iOS and Android cameras read natively. Nothing on this page touches the network.
Why should guests use a separate guest network?
A guest network isolates visitors' devices from your computers, NAS and smart-home gear, and lets you rotate its password freely without re-pairing your own devices. Most routers ship the feature switched off - It's worth two minutes to enable.
Can WPA3 be cracked?
Not the way WPA2 can. WPA3's SAE handshake blocks the offline dictionary attack that made captured WPA2 handshakes crackable, and early implementation flaws (the 2019 'Dragonblood' bugs) were patched in firmware. A weak WiFi password still matters, though - WPA3 protects the handshake, not a guessable key typed at the router login.
How often should I change my WiFi password?
When it matters: after a breakup or roommate change, after giving it to contractors, or if you notice unknown devices. A strong key doesn't expire on a calendar - See our guide on password rotation for the same logic.

More questions about passwords and security? Browse the security guides.

' + card.innerHTML + ''); win.document.close(); win.print(); }); generate(); })();