PIN Generator
Random PINs for cards, phones, and locks, with an option to dodge the obvious ones.
🔒 Generated in your browser, never sent or stored
PIN Length
PIN Security, Explained
PINs are short, so every digit counts. Leaked PIN databases show the same handful of codes used constantly: 1234, 0000, 1111. Those are trivial to guess, and a random PIN with no sequence or repetition takes you off that list.
Every digit here comes from the same source as Password Lizard's other tools: the browser's Web Crypto API (crypto.getRandomValues), not Math.random(), which isn't safe for security purposes. It also uses rejection sampling: any raw value that would land unevenly across the 0-9 range is discarded, so a naive % 10 bias toward certain digits can't creep in. Nothing you generate is ever transmitted or stored.
FAQ
What's a safe PIN length?
Most modern phones default to 6 digits, which is now the common recommendation. Bank cards are still typically 4, and 8 is a stronger option where it's supported.
Why avoid sequential or repeated digits?
PINs like 1234, 0000, or 1111 are among the first guesses in any brute-force attempt, since they're extremely common. Avoiding predictable patterns removes your PIN from that easy-to-guess list.
Is 1234 a common PIN?
Yes. Studies of leaked PIN databases consistently show 1234, 0000, and 1111 among the most-used PINs, which puts them among the weakest choices you could pick.
How are these PINs generated?
Each digit is drawn from crypto.getRandomValues(), the same cryptographically secure source used throughout Password Lizard, with rejection sampling applied so every digit 0-9 is equally likely. Everything happens locally in your browser, and nothing is ever sent anywhere.