Generate a random PIN instantly, or hit Lucky and watch the digits roll like a slot machine. Everything runs in your browser — nothing is sent anywhere.
A Personal Identification Number. You use one every time you withdraw cash from an ATM, unlock your phone, confirm a payment, or verify a SIM card. Unlike passwords, PINs are short numeric codes. They stay secure because the hardware enforces a lockout after a few wrong tries. Get it wrong three to five times, and the device or account locks. That lockout is the entire security model.
About 11% of 4-digit PINs in use are just 1234. Birth years (1990, 1987), repeated digits (1111, 0000), and keyboard patterns (2580, which is the middle column of a phone keypad) are the next most common. Attackers try these first. A study of leaked PIN databases found that the top 20 combinations account for roughly 27% of all PINs. The only way to avoid a predictable PIN is to let a random generator pick one.
Split it into pairs: 8274 becomes 82 and 74. Two short numbers are easier to hold in memory than four loose digits. Type it on your phone's lock screen a few times right after setting it. Your fingers will pick up the pattern faster than your brain memorizes the numbers. If it helps, trace the PIN on a keypad and notice the shape it makes.
Every digit comes from crypto.getRandomValues(), the same cryptographic random number generator that banks and security software use. No digit is more likely than any other. The page runs entirely in your browser. No data is sent anywhere.
For ATMs and phones, yes. Hardware lockout after 3 to 5 wrong tries makes brute force impractical. For software that allows unlimited guesses, a 4-digit PIN is weak. There are only 10,000 possible combinations, and a computer can try all of them in under a second. Context matters: the lockout mechanism is what makes a short PIN viable.
1234 alone accounts for roughly 11% of all 4-digit PINs. The top 20 most common PINs cover about 27%. Birth years (19XX), repeating digits (1111, 0000), and simple patterns (1234, 4321, 2580) dominate the list. If your PIN is on that list, change it.
If the system allows it, yes. Going from 4 to 6 digits increases combinations from 10,000 to 1,000,000. An 8-digit PIN has 100 million combinations. The tradeoff is memorability. Longer PINs are harder to remember, and if you end up writing it on a sticky note, you've traded one problem for another.
Not recommended. Passwords face online and offline attacks with billions of guesses per second. A PIN relies on lockout mechanisms: 3 wrong tries and the account locks. Without that lockout, even an 8-digit PIN is cracked instantly. Use a proper password or passphrase for anything that doesn't enforce attempt limits.
It uses crypto.getRandomValues(), the cryptographic random number generator built into your browser. Each digit is chosen independently with uniform probability. Nothing is sent to any server. Everything runs locally in your browser tab.
People are bad at random. We pick birth years, anniversaries, repeated digits, keyboard patterns. Roughly 27% of all PINs in use come from the top 20 most common combinations. A random generator has no favorites and no patterns. It picks each digit with equal probability, which is exactly what you want.