Security

Random PIN Generator

Create unguessable numeric PINs for cards, alarms, apps and devices. Pick how many digits you need. Everything runs in your browser.

6

What is a PIN generator for?

A PIN (Personal Identification Number) is a short numeric key used wherever a full keyboard isn't practical: ATMs, alarm panels, electronic locks, smart locks, SIM cards, point-of-sale terminals and mobile apps. Unlike a regular password, a PIN only uses digits, which limits its entropy and forces it to rely on extra mechanisms like lockout after failed attempts.

Genfy's generator uses crypto.getRandomValues, the browser's cryptographic API, to produce each digit at random. That's a huge improvement over picking one "off the top of your head" — humans repeat patterns (dates, repeats, sequences) that are the very first things any automated attack tries.

How many digits should you pick?

  • Bank cards and ATMs: 4 digits. The card is locked after 3 failed attempts, so brute force is impossible. Just avoid obvious dates and patterns.
  • Phone unlock and apps: 6 digits is the new standard (iOS and Android both recommend it). About 100x stronger than 4 digits.
  • Home safes and combination locks: 6-8 digits. These rarely have lockout, so length matters more.
  • Alarm panels with quick disarm: 4-6 digits. Balance security with how fast you can punch it in under stress.
  • Critical systems without lockout: 8-12 digits. Without auto-lockout, every extra digit multiplies the attack cost by ten.

How PIN strength is calculated

An N-digit PIN has 10^N possible combinations. Sounds plenty, but compare:

  1. 4 digits = 10,000 combinations. A computer tries them all in milliseconds.
  2. 6 digits = 1,000,000. Still trivial without lockout, fine with one.
  3. 8 digits = 100,000,000. Starts to slow down even dedicated hardware.
  4. 10 digits = 10 billion. Comparable to a short lowercase password.

That's why a PIN should never be the only defense for an important account. Always combine it with attempt lockout, a second factor (SMS, authenticator app) or biometric protection.

Common PIN mistakes

Studies of real data breaches show that more than 25% of 4-digit PINs fall in the top 20 most-used. The most common are 1234, 1111, 0000, 1212 and 7777. Birth years (1985, 1990) and diagonal keypad patterns also rank high.

  • Don't use your birth date, your partner's, your kids', or anniversaries.
  • Avoid repeated digits (4444) and sequences (1234, 4321).
  • Don't reuse the same PIN on your card, phone and alarm.
  • Don't write it on an unencrypted note or a slip in your wallet.

How to memorize a random PIN

Generating a random PIN is step one; remembering it is step two. Techniques that work:

  • Chunking. A 6-digit PIN like 473829 is easier as 47-38-29.
  • Numeric association. Find a personal meaning after the fact: "47 is my street number plus 4".
  • Spaced repetition. The first three days are critical: use it several times or store it temporarily in a password manager until it sticks.

Privacy of this generator

Everything happens in your browser. No server, no analytics on the PINs, no tracking cookies. If you close the tab without copying, the PIN is gone forever, which is exactly what you want.

FAQ

How many digits should a secure PIN have?

For ATM cards, 4 digits. For phones and apps, 6-8. For critical systems without lockout, 10-12.

Is a 4-digit PIN safe?

Only if the system locks the account after a few failed tries, like an ATM. Without lockout, 4 digits crack in milliseconds.

Which PINs should I avoid?

Birth years, sequences (1234, 1111), keypad patterns and the most common ones (1234, 0000, 1111, 1212). A random PIN solves all of those.

Does Genfy store the PINs?

No. Everything runs in your browser via crypto.getRandomValues. Nothing is sent to a server or logged.