How to use it
- Set the Length from 8 to 63 characters. Longer is stronger: 20 characters is a good start.
- Tick the kinds of characters to use. Keep Only the symbols that are easy to type ticked if people will type the passphrase on a TV or a phone.
- Copy the Your passphrase box into the router's Wi-Fi password field. Change any setting to draw another passphrase.
- Keep the passphrase somewhere safe: the page does not keep it.
The WPA2 and WPA3 rule
A WPA2-Personal passphrase is 8 to 63 printable ASCII characters, each with a code from 32 to 126. This comes from IEEE Std 802.11i-2004, Annex H.4.1, as cited in the Wikipedia article on Wi-Fi Protected Access.
WPA3-Personal replaces the key exchange with SAE, but this page uses the same 8 to 63 limits. If your router states other limits, follow the router.
How the passphrase is drawn
Each character is a draw from crypto.getRandomValues, the secure random numbers of your browser. Each draw is unbiased, so every character of the pool is equally likely in every place.
The pool is the sum of the sets you chose. The space is never used, because it is easy to lose at the start or the end of a passphrase. The symbols of the easy set were chosen by hand for this page; they are not a standard.
entropy (bits) = length x log2(pool size)
Sharing with guests
A passphrase is hard to read out and type. For a guest, a QR code of the network's details saves that work: make one with the QR code generator, and keep the printed copy out of public view.
Worked example: 20 characters from the easy set
With letters, digits and the 13 easy symbols, the pool has 52 + 10 + 13 = 75 characters. A passphrase of 20 characters from that pool has 20 x log2(75), which is about 124.6 bits.
Each extra character adds log2(75), about 6.2 bits; a passphrase of 8 characters from the same pool has about 49.8 bits.
Frequently asked questions
Is the passphrase sent to a server or stored?
No. The passphrase is drawn in your browser and shown on this page. Nothing is stored, sent or logged, and a reload removes it, so copy it before you leave the page.
Why are some symbols left out?
The quotes, brackets, slashes and a few other symbols need an extra key layer on phones and TV remotes, and some devices read them differently. The easy set keeps the passphrase quick to type on those devices.
Why is the space left out?
A space is allowed by the standard, but it is easy to lose at the start or the end of a passphrase, and some devices trim it. Leaving it out keeps the passphrase exactly what you copied.
How long should a Wi-Fi passphrase be?
The rule allows 8 to 63 characters. A random passphrase of 20 characters from the easy set has about 124.6 bits, far more than a short word could give. A longer one is safer, if the devices that join accept it.
What if my router allows only some of these characters?
Choose only the sets it accepts, and check the length limit in its settings. A router's own limit wins over this page's rule, so when the two differ, use the router's.
Sources
- Wikipedia: Wi-Fi Protected Access (the 8 to 63 rule and the citation of IEEE 802.11i)
- Wikipedia: IEEE 802.11i-2004
- MDN: Crypto.getRandomValues()
Figures and text last checked on Tuesday, November 10, 2026.