How a WiFi QR Code Lets Guests Join Without Typing the Password
Make a WiFi QR code so guests scan to connect instead of typing a long password. The WIFI: payload format, WPA vs open vs hidden, and printing it.
How a WiFi QR Code Lets Guests Join Without Typing the Password
I count it as a small defeat every time someone reads a WiFi password aloud. "Capital B, lower-case e, semicolon — no wait, is that a colon?" The person typing gets it wrong twice, the router locks them out for a minute, and you both pretend that was fine. A WiFi QR code ends that ritual. The guest points a phone camera at a square of black and white, taps the banner that pops up, and they are on the network before they have put their bag down.
This post walks through what that little square actually contains, how to pick the right encryption setting so the join doesn't silently fail, and how to print one that survives a cafe counter. You can build the code as you read with the WiFi QR Code Generator — it runs entirely in your browser, which matters for a reason I'll come back to.
What the QR code actually encodes
A WiFi QR code is not magic and it is not a link to anything. It is a short, structured string that iOS and Android camera apps recognize on sight. The format the Wi-Fi Alliance defined looks like this:
WIFI:T:WPA;S:<ssid>;P:<password>;;Read it like a tiny record. T is the security type, S is the SSID (your network name), and P is the password. The semicolons separate the fields and the double semicolon closes the record. When a phone camera decodes that text and sees the WIFI: prefix, it doesn't open a browser — it offers to add the network and connect. That is the whole trick: the same camera that reads a poster URL also speaks this one extra dialect.
There is a fourth field you'll see for some networks, H:true, which I'll get to under hidden networks. And there's one detail that trips up anyone who tries to type the string by hand, which I'll get to under special characters. For now, the takeaway is that the QR is just this text, drawn as a grid.
A worked example you can scan
Say a coffee shop runs a guest network named Bean Counter Guest with the password Roast-2026!. The generator builds exactly this payload:
WIFI:T:WPA;S:Bean Counter Guest;P:Roast-2026!;H:false;;Drop that text into the QR encoder, and you get a scannable grid. A phone reads it back as: security WPA, network "Bean Counter Guest", password "Roast-2026!", not hidden — and joins. The customer never sees the password and never types a character. If you want to confirm what's inside any code, you can run the image back through the QR Code Decoder and read the WIFI: string straight out of it; the field structure above is exactly what comes back.
WPA, open, and the encryption you must match
The T: field has to match your router, or the phone connects to nothing. There are three practical cases.
WPA / WPA2 / WPA3. Almost every home and office router today uses one of these for a personal network. Here is the part people overthink: the QR format uses the single type code WPA for all three. There is no separate WPA3 token. If your router is WPA3 personal, you still select the "WPA / WPA2 / WPA3" option, and the join works. Picking the wrong one of these isn't possible because they collapse to one setting.
Open (None). If the network is genuinely passwordless — a public hotspot with no encryption — the type is nopass and the password field stays empty. The common mistake here is leaving a password in the field for an open network. That single stray value makes the join fail, because the phone tries to authenticate against a network that expects no key. For open networks, choose "None" and clear the password.
WEP. This is the legacy option for old hardware. You almost certainly don't want it; if a modern WPA router gets a WEP code, the phone won't connect. Only pick WEP if your router specifically runs WEP, which in 2026 means it is ancient.
When in doubt for an ordinary home or office router, "WPA / WPA2 / WPA3" is the right answer.
Hidden networks and special characters
Two details separate a code that works from one that quietly doesn't.
A hidden network is one whose router doesn't broadcast the SSID, so phones won't find it by browsing the list. For these, the payload needs H:true. Without that flag, the camera adds the network but the phone never sees it advertised and gives up. Tick the "hidden network" box and the generator writes H:true for you. If your network shows up in the normal WiFi list, leave it unchecked.
Special characters are the other landmine. Five characters are reserved in the WiFi QR format: backslash, semicolon, comma, colon, and double-quote. They have meaning in the string — ; and : are field separators — so a password like be;ans:2026 typed straight into the payload would split into broken fields and the QR would fail. The fix is to backslash-escape each reserved character so the scanner reads it as a literal. The generator does this automatically and exactly once. The trap I see most often: people know the rule, add their own backslashes, and then the tool escapes again, so doubled backslashes end up in the real password. Paste your password raw, exactly as the router has it, and let the escaping happen for you.
Printing it for a cafe or guest room
A QR code that scans on your screen can still fail taped to a wall, so a few print habits matter.
Export PNG when you want a fixed-size print — a laminated A6 card for a counter, say. Export SVG when you want to scale the same code onto a poster or a framed welcome card without any blur; vectors stay crisp at any size. Many generators, including this one, also offer a one-click "Print poster" sheet with a "Scan to join WiFi" heading and the network name already laid out.
Three rules keep the scan rate high. Print at least 3 cm square; smaller than that and people have to nearly touch the paper. Keep it black on white — a colored or tinted background drops real-world scan rates even when the contrast looks fine on a monitor. And pick the error-correction level for the wear it'll take: level M is plenty for a clean indoor print, but bump to Q or H for a card that gets handled, taped to a metal stand, or rained on, since H recovers up to about 30% damage. Always scan-test from arm's length before you laminate.
Why generating it locally is the whole point
Here is the reason I keep stressing "in your browser." A WiFi QR code is your password in visual form — anyone who decodes the printed square is on your network. So the password deserves to be treated like a secret while you make the code. A good generator holds the password in memory only: it is never written into a shareable URL (so a "share this setup" link carries the network name and encryption type but not the password), never saved to local storage, and never uploaded to a server. The QR is drawn entirely on your machine.
When I set one up for a friend's guest room, I generated it on her shared family laptop and didn't think twice, because nothing about that password landed in the browser history or a server log. That's the dividend of local generation: you can build the thing on any machine without leaving the secret behind. If you need a strong guest password to put inside the code in the first place, the Password Generator makes one client-side too, and the WiFi QR Code Generator turns it into a scannable square without either value ever leaving the tab. Do remember the flip side: the printed code still is the password, so treat the sticker on the wall with the same care, and reprint whenever you rotate the password.
Made by Toolora · Updated 2026-06-13