WPA2/WPA3 accepts 8–63 ASCII characters. The math is unforgiving: every character you add roughly multiplies cracking time by the size of the character pool. A modern attacker with a single rented GPU cluster can try tens of billions of WPA2 guesses per second.
| 8 chars | Hours |
| 12 chars | Months |
| 16 chars | Centuries |
| 20+ chars | Effectively forever |
Estimates assume a fully random ASCII password and a single high-end GPU cluster. Real-world attackers go faster on weak passwords and slower on truly random ones.
Ready to retire the WiFi sticky note?
TeamPassword stores, rotates, and shares your team's WiFi credentials, encrypted end-to-end.
Get started free