WPA Key Generator

It is the shared secret for a WPA-Personal, WPA2-Personal, or WPA3-Personal network — the Wi-Fi password in your router’s settings, also called the pre-shared key (PSK) or network security key. The standard allows 8 to 63 printable ASCII characters, and every device joining the network uses the same key.

The standard allows 8 to 63 characters. A random 20-character key (about 129 bits) is already beyond brute force; the 63-character maximum is a common admin convention for keys that are pasted or shared by QR code rather than typed. Avoid the 8-character minimum: a random 8-character key has only about 52 bits.

Not meaningfully. A random 63-character key has about 407 bits of entropy, but WPA hashes every passphrase into a 256-bit key, so the effective ceiling is 256 bits — reached at about 40 random characters. Filling all 63 does no harm; it just adds no strength.

No — it generates passphrases, the 8-to-63-character form every device accepts. Some devices also take the raw 256-bit key as 64 hexadecimal digits; that is what a passphrase is hashed into, with the SSID as salt, and tools such as wpa_passphrase compute it from a passphrase and network name. Most networks never need the hex form.

Printable ASCII, character codes 32 to 126: letters, digits, symbols, and the space. This generator uses letters, digits, and 26 common symbols, leaving out spaces, quotes, backslashes, and backticks. If an older device still balks, turn symbols off — 63 letters and digits carry about 375 bits, far above the 256-bit ceiling.

Safer, not safe regardless. WPA3’s SAE handshake was designed to stop offline guessing from a captured exchange, but networks in WPA2/WPA3 transition mode still accept the older WPA2 handshake, and researchers have shown downgrade and side-channel attacks against early WPA3 implementations. A long random key protects you either way.