What's The PIN?

It's 1234. Nick Berry's 2012 analysis at Data Genetics — still the canonical study — examined 3.4 million four-digit codes leaked in security breaches and found 1234 accounted for 10.713% of them. Random selection would put each PIN at 0.01%. The top three (1234, 1111, 0000) account for nearly 19% of all PINs. The top 20 codes cover 26.83% — meaning if you guess the right 20 numbers, you've cracked roughly one in four real PINs. Today's PIN at Frustrated Bank is one of 10,000. We do not promise it isn't 1234. We do not promise it is.

10,000. Each digit position holds one of ten values (0-9), so the total combination space is 10 × 10 × 10 × 10 = 10⁴. Of those 10,000, Berry's analysis showed that 50% of real-world PINs can be cracked in just 426 attempts because human-chosen PINs cluster heavily around dates, repeated digits, and keypad-pattern shortcuts (2580 ranks #22 because it's the centre column of a phone keypad). The Frustrated Bank PIN is randomly selected from the full 10,000 each day at 00:00 UTC. Random doesn't favour 1234 and doesn't avoid it.

Yes. 1234 is the single most common 4-digit PIN in the world — used roughly 10,000 times more often than the least common one (8068, with just 25 occurrences in Berry's 3.4 million dataset). 30 of the 50 most common PINs start with 19 or 20, suggesting birth-year usage. The 17th most common ten-digit password in the same study was 3141592654 — the first ten digits of pi. Humans are pattern-seeking even when they're trying not to be. Today's PIN is selected by a Postgres random() function. It does not care about your birth year.

Sequential digits (1234, 4321), repeats (0000, 1111, 7777), date patterns (1990, 2001, 0429 — birthdays in MMDD format), and keypad-pattern shortcuts (2580 = centre column, 1397 = corners + extra). Berry's heatmap of 3.4 million PINs shows a bright bottom-left quadrant where date-format PINs cluster, a diagonal line where repeated-pair PINs sit (1212, 3434), and dim corners where genuinely random PINs barely appear. Statistically, the safest 4-digit PINs are unrepeated pairs of two-digit numbers above 50, like 8957 or 7064. Today's Frustrated Bank PIN may or may not be one of these. We don't tell you until you guess it.

Most banks block your card after 3 incorrect PIN attempts. Standard duration is 24 hours (SBI, HDFC), some impose 2-3 days (Axis Bank), some go up to a week (international banks like Citi and HSBC). Some ATMs retain the card physically — the "card retained" message means the ATM swallowed it, and you're calling your bank in the morning. Frustrated Bank gives you 10 attempts, generous by industry standards. After 10 failed attempts, the screen displays "CARD RETAINED" and locks you out until 00:00 UTC the next day. Your fake card is fake. Your panic is real.

Yes. The "N" in "PIN" already stands for Number — Personal Identification Number — so saying "PIN number" is technically saying "Personal Identification Number Number." Pedants point this out at parties. Everyone agrees and continues saying "PIN number" anyway because "what's your PIN" sounds like the start of a security question and "what's your PIN number" sounds like a sentence. Frustrated Bank uses both forms interchangeably in our copy. The ATM screen says PIN. The mock-helpline voice would say PIN number. They are the same number.

Yes. The game runs in any modern mobile browser — iOS Safari, Android Chrome, Brave, Firefox. The ATM keypad is touch-optimized: tap a digit to enter, the four PIN slots fill left-to-right, ENTER submits, CLEAR resets. There's no app to download, no signup, no email, no payment. The Daily PIN is the same for every player worldwide and resets at 00:00 UTC. Practice mode generates a random PIN locally with infinite attempts. Your stats persist via localStorage; cracking the daily PIN puts you on the global Today's Crackers leaderboard via your initials.

Wordle launched in October 2021 as a personal gift from Josh Wardle to his partner, hit cultural saturation by January 2022, and was acquired by The New York Times for a reported seven figures. The format — one puzzle per day, shared by everyone, spoiler-free emoji-grid sharing — turned out to be the killer mechanic the puzzle-game category had been missing for thirty years. Hundreds of variants followed. Most lasted a year. The survivors (Connections, Quordle, Crosswordle, Nerdle, Primel, and now frustrated.io's What's The PIN) occupy distinct neighbourhoods of the same cul-de-sac. The daily-reset, single-shared-puzzle, no-signup format is the genre. The puzzle inside it can be anything.

No. Frustrated Bank is a parody — a fictional financial institution that exists only as a 4-digit PIN-guessing game on Frustrated.io. We do not hold deposits, issue cards, or have a real address. The "FRUSTRATED BANK · v 4.7.2 · FRBANK / 0042" branding is set dressing for the game. The "card retained" message means you've used your 10 daily attempts; no real card is retained, no real account is locked, no real bank exists. If you came here looking for actual banking services, you've reached the wrong place. If you came here to crack today's PIN, you've reached the right place. Standard page-level Google Analytics is enabled (see /privacy/). No banking credentials are collected, requested, or processed.