A PIN guards your phone, your SIM, your bank card and sometimes your front door, yet most people pick one in seconds and never think about it again. The trouble is that a weak PIN is cracked just as fast. Our GetMyPassword team explains how to choose a strong PIN and the common ones to avoid.
Why a weak PIN fails
A four-digit PIN has only ten thousand combinations, and people cluster around a tiny handful of them. Codes like 1234, 0000, 1111 and a recent birth year make up a huge share of all PINs, so a thief who finds your phone or card tries those first. A predictable PIN turns a strong lock into an open door.
What makes a PIN strong
- Avoid dates — no birthdays, anniversaries or years anyone could find.
- Avoid patterns — skip repeats and sequences like 2580 (a straight line on the keypad).
- Use six digits where your device allows it, instead of four.
- Make it random — a number with no meaning to you is far harder to guess.
Use a different PIN for each thing
Just like passwords, PINs should not be reused. If your phone, your bank card and your door lock all share one code, a single glimpse over your shoulder exposes everything. Give each its own PIN, change any default code that came with a device, and shield the keypad with your hand when you type — shoulder-surfing in shops and at ATMs is still one of the easiest attacks there is.
A PIN is a tiny password, and the same rule applies: the value is in being unpredictable. A random six digits you do not share beats any birthday or pattern.
Strong PINs and strong passwords together
A good PIN locks the device in your hand, but your accounts also need strong, unique passwords behind them. Generate a random one for every account with our password generator, store them in a password manager, and turn on two-factor authentication. A random PIN on the device and a strong password on the account cover both ends of the same lock.
Frequently asked questions
What makes a strong PIN?
A strong PIN is random, avoids dates and keypad patterns, and uses six digits where possible instead of four. It has no meaning anyone could guess, and it is different for each device, card and lock.
What are the worst PINs to use?
The most guessed PINs include 1234, 0000, 1111, repeated or sequential digits, keypad lines like 2580, and recent birth years. Thieves try these first, so avoid them entirely.
Should I use the same PIN for my phone and bank card?
No. Reusing one PIN means a single glimpse over your shoulder exposes everything. Give your phone, card and any locks their own PINs, and change any default code that came with a device.