Strong WiFi Password Examples
Your WiFi password is the first line of defense for everything on your home network — every phone, laptop, smart TV, and IoT device connected to it. A weak WiFi password exposes your entire network to unauthorized access, traffic interception, and bandwidth theft.
WPA2 and WPA3 Password Requirements
Both WPA2-Personal and WPA3-Personal (SAE) use a Pre-Shared Key (PSK) for authentication. The Wi-Fi standard defines:
- Minimum length: 8 characters
- Maximum length: 63 printable ASCII characters
- Recommended minimum: 16 characters for real security
WPA3's SAE (Simultaneous Authentication of Equals) protocol is more resistant to offline dictionary attacks than WPA2's 4-way handshake, but the password requirements and character set are the same.
How WiFi Passwords Are Cracked
Handshake Capture (WPA2)
An attacker within range of your network can capture the WPA2 four-way handshake (or a PMKID packet from the access point, which requires no client to be present) and take it offline. They then run dictionary or brute-force attacks against the captured hash without interacting with your router further.
WPA2 uses PBKDF2-SHA1 with 4,096 iterations to derive the Pairwise Master Key (PMK). This key stretching makes cracking significantly slower than raw SHA-256:
| Attack Target | Speed (1 GPU, ~2024) |
|---|---|
| MD5 (fast hash) | ~30–50 billion/sec |
| SHA-256 | ~10–15 billion/sec |
| WPA2-PSK (PBKDF2-SHA1, 4096 iters) | ~100,000–400,000/sec |
At 400,000 guesses/sec, a 16-character random password (102 bits of entropy) would take approximately 2102 / 400,000 seconds to exhaust — many orders of magnitude more than the age of the universe.
Dictionary Attacks
Most successful WiFi cracks use dictionary attacks with wordlists based on common router passwords, names, dates, and previously cracked networks. Default router passwords (like "admin", "password", or "00000000") are tried first. Change your router's default password immediately.
Strong WiFi Password Examples
The following are examples only — do not use these exact passwords. Generate your own with the tool below.
Random Passwords (Highest Entropy)
| Example Password | Length | Entropy |
|---|---|---|
Kx#9mP!qN7@wR3vL | 16 | ~102 bits |
H7!kL2@pQ9#xZ1vM | 16 | ~102 bits |
mR#4qP!9kN@2xL7vB3wY | 20 | ~127 bits |
Advantage: maximum entropy. Disadvantage: difficult to type on a TV remote or game console.
Passphrases (Easier to Type)
| Example Passphrase | Format | Notes |
|---|---|---|
Thunder-River-Glass-Cosmos-042! | 4 words + suffix | Memorable, ~50+ bits |
Mountain-Forest-Storm-Eagle-River-Lake | 6 EFF-style words | ~77 bits (EFF list) |
Correct-Horse-Battery-Staple-Light-Stone | 6 EFF-style words | ~77 bits |
For a passphrase to be truly secure, words must be chosen randomly (not by you). Use the generator on this site or physical dice with the EFF word list.
Practical Security Tips for WiFi Passwords
Change the Default Router Password
Default passwords like admin, password1, or 00000000
are the first targets in any attack. Change it immediately after setting up a new router.
Use a QR Code to Share Your Password
If your WiFi password is long and complex, create a QR code for guests to scan instead of typing it. Most smartphone camera apps can scan WiFi QR codes directly. This lets you use a very strong password without sacrificing convenience.
Consider WPA3 If Your Router Supports It
WPA3's SAE protocol provides better protection against offline dictionary attacks compared to WPA2's TKIP/AES handshake. If your router and all devices support WPA3, upgrade. However, even on WPA2, a strong random password (16+ characters) is effectively uncrackable.
Use a Separate Guest Network
Set up a guest network with a different password for visitors and IoT devices. This isolates untrusted devices from your primary network without requiring you to share your main WiFi password.
FAQ
How long should a WiFi password be?
At least 16 characters. WPA2/WPA3 support up to 63 characters. A 16-character random password using mixed types reaches ~102 bits of entropy — effectively uncrackable at WPA2's attack speed of ~400,000 guesses/second.
Are passphrases good for WiFi?
Yes — especially because they are easier to type on TVs and game consoles. A 6-word randomly generated passphrase provides ~77 bits of entropy, which is strong. For maximum security, combine a passphrase with a random number and symbol.
What is the maximum WiFi password length?
WPA2-Personal and WPA3-Personal both support 8 to 63 printable ASCII characters. 20–30 characters is more than sufficient — going beyond that provides no additional benefit.
How fast can someone crack a WPA2 password?
WPA2 cracking runs at approximately 100,000–400,000 guesses/sec on a modern GPU, because WPA2 uses PBKDF2-SHA1 with 4,096 key derivation rounds. A 16-character random password is effectively uncrackable at this speed.
Generate a strong WiFi password now: use the secure password generator.
Also read: Password vs. Passphrase • Password Entropy Explained
We do not collect, store, or transmit any passwords.