PIN generator
Random PINs for cards, phones, alarms and locks, without the easy-to-guess ones.
10,000 possible 4-digit PINs
How it works
What makes a PIN hard to guess
A PIN is short, so it relies on two things: being random, and being protected by a limit on wrong attempts. A random PIN gives a guesser no head start; a lockout after a few tries stops them from trying them all.
| Length | Possible PINs | Chance with 3 random guesses |
|---|---|---|
| 4 digits | 10,000 | 1 in 3,333 |
| 6 digits | 1,000,000 | 1 in 333,333 |
| 8 digits | 100,000,000 | 1 in 33 million |
Those odds only hold for random PINs. Real people favor 1234, 1111, 0000, 1212 and years of birth, so a guesser who starts with those does far better. That is why this generator skips them by default.
For accounts that accept letters too, a random password or a passphrase is much stronger than any PIN.
More tools
More ways to stay safe
- Password generatorRandom passwords with the length and characters you choose.
- Passphrase generatorStrong passwords made of random words, easy to remember and type.
- Password strength checkerSee how long a password would hold out, and why.
- How to create a strong passwordSix simple rules for passwords that are hard to crack.
Frequently asked questions
Is a 4-digit PIN secure?
For a bank card or phone that locks after a few wrong tries, a random 4-digit PIN is fine: with 3 attempts, a guesser has a 3 in 10,000 chance. The danger is predictable PINs. In a 2012 analysis of 3.4 million leaked PINs, 1234 alone made up almost 11%. Where you can choose, 6 digits are much safer.
Why avoid birthdays and years?
Years from 1900 to 2099 are only 200 of the 10,000 possible four-digit PINs, and birthdays are often public. Attackers who know a little about you try them first. The "avoid easy PINs" option skips them, along with repeats like 1111, runs like 1234 or 9876 and patterns like 1212.
How random are these PINs?
Each digit comes from your browser’s cryptographically secure random number generator, so every allowed PIN is equally likely and nobody can predict them.
Are the PINs stored anywhere?
No. They are generated in your browser and disappear when you leave the page. Nothing is sent to a server.