WPA2/WPA3 accepts 8–63 ASCII characters. The math is unforgiving: every character you add roughly multiplies cracking time by the size of the character pool. A modern attacker with a single rented GPU cluster can try tens of billions of WPA2 guesses per second.
| 8 chars | Hours |
| 12 chars | Months |
| 16 chars | Centuries |
| 20+ chars | Effectively forever |
Estimates assume a fully random ASCII password and a single high-end GPU cluster. Real-world attackers go faster on weak passwords and slower on truly random ones.
Ready to retire the WiFi sticky note?
TeamPassword stores, rotates, and shares your team's WiFi credentials — encrypted end-to-end.
Get started free