About this generator
This preset creates six random decimal digits locally. A six-digit PIN has 1,000,000 possible values and should rely on online rate limits, lockout controls, and a separate authentication factor.
This preset starts with pin mode and generates 10 independent results at a time. Every visible setting remains adjustable, and generated values are not sent to PwdGen.
When to use it
- Creating a new credential for this specific use case
- Replacing a reused or weak password
- Generating values locally before secure storage
Alphabet size, entropy, and brute-force assumptions
The theoretical entropy ceiling is calculated as H = L × log2(A), where L is the generated length and A is the number of currently permitted characters.
| Length | Alphabet | Search space | Entropy ceiling | Average at 10 billion guesses/s |
|---|---|---|---|---|
| 6 | 10 | 106 | 19.9 bits | less than 1 millisecond |
Important: these are mathematical estimates for uniformly random values. Required positions, restricted counts, repeated passwords, dictionary patterns, leaked credentials, and real password-hashing costs can change the result substantially. The figure is not a security guarantee.
The security model of a six-digit PIN
Six decimal digits create exactly 1,000,000 combinations, from 000000 through 999999, with a theoretical ceiling of 19.93 bits. An unrestricted offline attacker can exhaust that space quickly.
PIN security therefore depends on server or device controls such as rate limiting, retry delays, lockout, device binding, monitoring, and an additional authentication factor. Do not use a six-digit PIN as a high-value encryption key.
How to use the result safely
- Check the destination’s current password rules
- Use a unique result and enable MFA where available
- Store recovery codes separately from the password
Generation and privacy method
The preset uses the browser Web Crypto API for random selection. Regenerating, changing settings, selecting, and copying results do not send generated credentials to PwdGen. The password crack-time estimator also runs locally and is an estimate, not a guarantee.
6 Digit PIN Generator FAQ
How many combinations does a six-digit PIN have?
A six-digit decimal PIN has 1,000,000 possible values, from 000000 through 999999, which corresponds to a theoretical maximum of about 19.93 bits when selected uniformly.
Is a six-digit PIN secure?
It can be suitable as one factor when the system enforces strict rate limiting, lockout, device binding, and monitoring. It is weak against unrestricted offline guessing.
Can a PIN replace a password or encryption key?
Not for high-value offline protection. Use a cryptographically random key or long password where unrestricted guessing is possible, and use MFA when supported.