Creating Secure PINs and Numeric Codes

PINs protect phones, bank cards, door locks and apps. Because they use only digits, their security depends heavily on length and on avoiding common choices.

How many combinations?

PINs are safe enough for devices and cards only because they are combined with attempt limits: a phone erases or locks after repeated failures, and a card is blocked after a few wrong tries.

PINs to avoid

Research on leaked PIN datasets shows a small set of codes accounts for a large share of all PINs:

• Repeated digits: 0000, 1111
• Sequences: 1234, 123456, 4321
• Years: 1980 to 2010, especially birth years
• Dates in day-month or month-day form
• Keypad patterns: 2580 (straight down the middle)

Making a better PIN

1. Use 6 digits wherever a choice is offered.
2. Generate it randomly: use the 6-digit PIN preset in our password generator, or roll a die.
3. Never use the same PIN for your phone and your bank card.

When a PIN is not enough

• Phone screen locks on devices containing email and banking apps benefit from a longer alphanumeric passcode.
• Encryption keys and offline files have no attempt limits, so they need a full-strength password or passphrase.

Protecting a PIN in use

Shield the keypad at cash machines and in shops, watch for skimming devices, and never write a PIN on or near the card it protects.

Frequently asked questions

Is there a random PIN generator?

Yes. Use the 6-digit PIN preset in our generator as a PIN generator. A random PIN avoids the predictable choices people make.

What are the most common PINs?

The most common PINs include 1234, 1111, 0000, 1212 and 7777, plus birth years. Attackers try these first, so avoid them for phones and cards.