Create a Wi-Fi QR code by entering the exact network name, security type, and password, then scan the result to offer a join action on compatible devices. The credentials are stored directly in a static QR payload; they are not hidden or encrypted by the symbol.
This generator runs in your browser and does not require an account. Use a separate guest network for visitors rather than exposing credentials for devices, staff, administration, or sensitive internal systems.
How to make a Wi-Fi QR code
- Copy the network name, or SSID, exactly as configured.
- Select the matching security type.
- Enter the current password with exact capitalization.
- Enable the hidden-network option only if SSID broadcasting is disabled.
- Generate and scan the code with a device that is not already connected.
- Confirm the phone shows the expected network before accepting.
- Download, label, and test the final printed version.
What does a Wi-Fi QR Code contain?
Many scanners recognize the de facto syntax documented by the ZXing project. A typical payload resembles:
WIFI:T:WPA;S:GuestNetwork;P:example-password;;
The T field describes authentication, S contains the SSID, P contains the password, and optional H:true identifies a hidden network. The QR Code itself only stores text; the scanning software decides whether to offer a connection action.
Which security type should you select?
| Network configuration | Generator choice | Note |
|---|---|---|
| WPA/WPA2/WPA3 personal network | Use the compatible WPA option offered by the generator | Test on all supported device generations |
| Legacy WEP | WEP only when the network actually uses it | WEP is obsolete and insecure; upgrade the network |
| Open network | No password / nopass | Users may still face a captive portal |
| Enterprise 802.1X | Use an enterprise-capable provisioning workflow | Identity, EAP, certificates, and policy complicate compatibility |
The label shown by a generator may not map perfectly to every access point's terminology. Validate with actual devices. A QR Code cannot upgrade weak wireless security.
Why do special characters matter?
ZXing's documented syntax uses semicolons and colons as structural separators. Backslash, semicolon, comma, double quote, and colon in values need backslash escaping. A good generator handles this automatically.
If a hand-built code fails, do not remove characters from the real password just to make the payload work. Regenerate it with correct escaping, then decode the raw text to verify that the original SSID and password survive exactly.
Do Wi-Fi QR Codes work on iPhone and Android?
Modern iOS and Android devices commonly recognize Wi-Fi payloads, but behavior varies by OS version, camera app, security configuration, and enterprise policy. Some devices display the network and ask for confirmation; others may only reveal text.
Test a device that has forgotten the network. If it is already connected or has saved credentials, a successful result may not prove that the QR payload is correct.
Does the code expose the password?
Yes. Anyone who can decode or photograph the symbol can recover its payload. The visual grid is not access control. Place the code only where intended visitors can see it and rotate guest credentials when access changes.
For businesses, isolate guest traffic from point-of-sale terminals, cameras, file shares, printers, building controls, and management interfaces. Use bandwidth, client-isolation, content, logging, and retention controls appropriate to the environment and local law.
Should the guest network be hidden?
Disabling SSID broadcast is not a substitute for authentication or network isolation. The hidden flag simply tells compatible software that the network is not normally advertised. Devices may handle hidden networks less reliably and can reveal remembered network names while probing.
Choose the setting based on network policy, not because hiding the name makes a weak password secure. Use modern encryption, a strong credential, firmware updates, safe router administration, and a separated guest segment.
Home, office, and event deployment differences
At home, keep the code away from windows and public photographs. In an office, establish an owner and expiration process for guest access. At an event, plan for temporary credentials, capacity limits, captive-portal instructions, and rapid sign replacement if the code is copied or the password rotates.
Can the QR Code connect without internet access?
The camera can decode the stored credentials without internet access, and the device may join a local wireless network that has no internet connection. Web browsing still depends on the access point's upstream service, authentication, DNS, and any captive portal. A successful QR scan is therefore not proof of working internet.
Can a Wi-Fi QR Code be updated after printing?
No. A static Wi-Fi QR Code always contains the credentials used when it was generated. If the SSID, security type, or password changes, generate and replace the code.
Do not place Wi-Fi credentials behind a public redirect to make them “dynamic”; that can expose them to anyone who has the URL and adds a service dependency. Operationally, use replaceable signs or holders so staff can update printed codes during credential rotation.
What about captive portals?
The QR Code can help a device join the wireless network, but it does not complete hotel, airport, café, or event portal terms and sign-in. The operating system may open the captive portal after connection.
Print short instructions explaining the second step. Test from a fresh device without existing cookies or saved authorization, and provide staff with a fallback network name and support route.
Print and placement checklist
- Label the correct guest network name beside the code.
- Use dark modules on a light, opaque background.
- Keep the four-module quiet zone clear.
- Avoid glare, folds, curvature, and low-resolution screenshots; the printing guide covers file format and paper.
- Place the code where intended users can reach it but casual passersby cannot copy it unnecessarily.
- Add a manual SSID and staff-support fallback without publicly printing a sensitive internal password.
- Replace every displayed copy when credentials rotate.
Troubleshooting a Wi-Fi QR Code
If the phone detects the code but cannot join, verify SSID capitalization, spaces, security type, password, hidden flag, and special-character escaping. Confirm the access point is available and accepting new clients.
If the phone cannot detect the symbol, test contrast, quiet zone, focus, size, glare, and print quality. These are separate from network authentication problems. Decode the raw payload with a trusted reader to determine which layer failed.