WiFi Password Key Generator
Generate a WPA2/WPA3 pre-shared key (PSK) in the exact format your router or configuration tool needs — a standard 8-63 character passphrase, or a raw 64-character hexadecimal key.
Generated via crypto.getRandomValues() in your browser. Never sent to our servers.
Passphrase vs. Raw Hex Key
| Property | Passphrase | Raw Hex Key |
|---|---|---|
| Length | 8–63 printable ASCII characters | Exactly 64 hex characters |
| Key derivation | PBKDF2 (4096 iterations) converts it to a 256-bit key | Used directly as the 256-bit key |
| Typical use | Home routers, consumer devices, standard setup screens | Enterprise configs, scripted deployments, some advanced router settings |
| Human-typeable | Yes — designed to be entered manually | Difficult — typically copy-pasted or provisioned automatically |
| Router support | Universal | Not all consumer routers accept raw keys |
Frequently Asked Questions
A pre-shared key (PSK) is the secret that authenticates devices to a WPA2 or WPA3 network. It's normally entered as an 8-63 character passphrase, which your router converts into the actual 256-bit encryption key using PBKDF2. Some systems allow entering that 256-bit key directly, as 64 hexadecimal characters.
For nearly everyone, the passphrase format is correct — it's what your router's setup page expects and what devices prompt you to enter. Only use the raw hex key if you're configuring equipment or a script that explicitly documents accepting a 64-character key.
Not meaningfully. A random passphrase of 20+ characters using all character types already provides well over 120 bits of entropy. The hex key's 256-bit space is a theoretical ceiling, not a practical improvement over a properly randomised long passphrase.