📶 WiFi Password Generator

Generates a WPA2/WPA3-compatible passphrase (8-63 characters) that avoids visually ambiguous characters like 0/O and l/1/I — easier to type correctly when a guest reads it off a card or your router label.

Length

Include digits

Include a few safe symbols (- _ .)

The character pool, and what it is worth

The letter set drops I, l, O and o, leaving 23 of each case; digits drop 0 and 1. The safe symbols are only -, _ and ., which every router firmware handles:

letters only        46  16 chars = 88 bits
letters + digits    54  16 chars = 92 bits
letters + both      57  16 chars = 93 bits

The three symbols buy about one bit across sixteen characters; one more character buys 5.75. If a guest has to read the key off a card, length is the better trade every time.

Setting it on the router

8 to 63 characters is the WPA2 and WPA3 limit, enforced by the field. Eight is the standard's floor, not a recommendation - only 46 bits here.
Your network converts the passphrase with PBKDF2-SHA1(passphrase, SSID, 4096 iterations). The network name is the salt, so a default SSID like NETGEAR or linksys has precomputed tables against it. Rename the network.
Use a separate guest network rather than handing out the key that also reaches your printer, NAS and cameras.

The passphrase is generated in your browser and never transmitted - but it does have to be typed into the router, so change it from the admin page over a wired or trusted connection, not from a cafe.

Frequently asked questions

How long should a WiFi password be?

Sixteen random characters is 92 bits and out of reach. Twelve is already 69 bits and fine for a home network. Go long anyway: you type it once per device and then forget it.

Can someone crack my WiFi password?

On WPA2, in principle: an attacker in radio range captures the four-way handshake and guesses offline at whatever rate their hardware allows. WPA3 replaces that handshake with one that resists offline guessing, so enable it if every device supports it.

Why avoid characters like O and l in a WiFi key?

Because someone will read it off a card and type it into a games console with a thumbstick. Dropping the six lookalikes takes the pool from 62 to 54, costing 0.2 bits a character - about 3 bits over a 16-character key, which a single extra character more than repays.