Wi-Fi QR code generator for easy guest access
Help guests connect without typing your Wi-Fi password. Enter your network details, generate a code, and download it for a welcome card, reception desk, or a quick scan from your screen.
Loading the tool…
A shortcut to your Wi-Fi network
A Wi-Fi QR code stores connection details in a format compatible scanners can recognize. Your phone reads the network name, security type, and password, then may offer to join. The generator does not change your router settings or check whether a connection succeeds.
These codes do not configure a static IP address, DNS server, or radio band. Set those on the device or router when needed. This tool accepts network names as text, rather than arbitrary binary SSIDs.
Use your existing network name and password exactly, including uppercase letters and spaces. A guest network is useful when you want to share access separately from your main network. Always scan the finished code with the phones your guests use before printing copies.
Choose the matching connection type
| Your network | Choose | What to expect |
|---|---|---|
| WPA or WPA2 Personal | WPA / WPA2 Personal | Encodes the familiar WIFI: format with a password. |
| WPA2/WPA3 mixed mode | WPA2 / WPA3 Personal (mixed) | Uses the same WPA payload; the device and router negotiate their connection. |
| WPA3-only Personal | WPA3 Personal (SAE) | Uses SAE, which requires a compatible scanner and device. |
| No password | Open (no password) | Omits the password. A web sign-in or captive portal still applies. |
| Enhanced Open | Enhanced Open (OWE) | Uses the no-password payload. The device must recognize OWE from the network; the QR code does not enforce encryption. |
| Older WEP network | WEP (legacy) | Choose the actual key’s text or hexadecimal format. WEP is obsolete; use a modern security mode when possible. |
| Device with Wi-Fi Easy Connect | Wi-Fi Easy Connect (DPP URI) | Renders an existing device-issued bootstrapping URI, including its public key and optional fields. It does not provision a device itself. |
Select Hidden network only if your router does not broadcast the network name. Hiding a name is not a security upgrade and does not keep the QR password secret.
Scanner support varies, particularly for WPA3, Enhanced Open, Easy Connect, and unusual characters. A valid QR image is not a guarantee that every phone can configure the connection. The Android Wi-Fi URI parser documents several of these reader conventions.
Wi-Fi security: from least secure to strongest
Match the generator to your existing router settings. Selecting a stronger type here does not upgrade the network. The colored shields below are a practical guide to wireless protection, not a security test of your router: red means unsafe, amber means limited protection, blue means good protection, and green marks the strongest personal option listed.
| Connection type | Security guide | What it means for your guests |
|---|---|---|
| Open (no password) | No Wi-Fi encryption or password barrier. Nearby observers can read unencrypted traffic; HTTPS still protects properly secured web connections. A captive portal does not add Wi-Fi encryption. | |
| WEP (legacy) | Its encryption is broken. A password does not make WEP safe; replace it with a modern router security mode. | |
| Original WPA / TKIP | Outdated protection. Avoid original WPA, TKIP, and router modes that allow them. | |
| Enhanced Open (OWE) | Encrypts each compatible wireless connection against passive listening, without a password. It does not authenticate the hotspot or restrict access to invited guests. | |
| WPA2 Personal with AES | A suitable fallback for devices without WPA3, with a strong password and updated devices. Avoid TKIP. | |
| WPA2 / WPA3 Personal (mixed) | A compatibility compromise: newer devices can use WPA3, while older ones use WPA2. It does not give every device WPA3 protection. | |
| WPA3 Personal (SAE) | Preferred when all your devices support it. Better protection against offline password guessing; still use a strong password and keep devices updated. |
The WPA / WPA2 Personal selector covers two different security generations because they share a QR format. Check the router: WPA2 with AES is different from original WPA or a WPA/WPA2 router compatibility mode. Apple’s router security guidance explains these settings, and Microsoft recommends WPA3 where supported.
OWE sits outside a simple password-security ladder: it improves privacy on public networks, but does not prove that a hotspot is trustworthy. On transition networks, older devices may connect without encryption. This generator’s no-password QR payload cannot require OWE. See the OWE specification’s security considerations.
Wi-Fi Easy Connect (DPP) uses an authenticated, encrypted setup exchange on compatible devices. It is not a stronger rung above WPA3: ongoing protection depends on the network configuration it provisions. Here, you supply an existing device-issued URI; the generator renders it and checks its basic structure, without validating its cryptography or configuring devices. Android’s Easy Connect documentation describes that provisioning process.
Whatever mode you use, treat a password-bearing QR image like the password itself. Stronger Wi-Fi encryption does not encrypt the contents of the QR image.
Clear exports for screens and print
Download PNG for a ready-to-use image. The free download includes a white border around the black squares. Keep that border intact and leave good contrast around the code; DENSO WAVE’s sizing guidance explains the four-module quiet zone.
In Options, choose an image size up to 2,048 pixels and an error correction level. The actual pixel size is rounded down to keep every square a whole number of pixels wide. Medium correction is the default; higher levels tolerate more damage but can produce a denser code. See DENSO WAVE’s error correction explanation.
For a compatible WPA3 setup, Disable WPA2 fallback adds the R:1 request. Use it only when your network supports that choice; scanners may ignore it. It does not reconfigure the router.
What the code contains
A simple example, using fictional credentials, is:
WIFI:T:WPA;S:Home Guest;P:example-password;;
The generator escapes separators such as semicolons and backslashes for you. Show QR data reveals the encoded text; Copy QR data copies it, including the password. The code itself also reveals those details to anyone who can decode it. Masking the password field does not protect a shared QR image.
Network names can contain 1–32 UTF-8 bytes. WPA/WPA2 accepts an 8–63-byte passphrase or 64 hexadecimal digits. WEP accepts 5, 13, 16, or 29 ASCII characters, or 10, 26, 32, or 58 hexadecimal digits. WPA3 passwords have a tool limit of 1,024 UTF-8 bytes; your router or phone may impose a smaller limit. Control characters and malformed Unicode are rejected; values are never silently trimmed or truncated.
Easy Connect URIs are preserved verbatim, with basic structure and public-key-field checks only. Their cryptographic validity and device compatibility are not verified. The shared encoder accepts up to 2,400 UTF-8 bytes; actual QR capacity also depends on the selected correction level. If a value does not fit, the tool reports it instead of generating an incomplete code.
Does my Wi-Fi QR code expire?
There is no built-in expiry or scan limit. It continues to contain the details used when you generated it. If the network name, password, or security settings change, generate and share a new code. Downloaded images remain on your device until you remove them.
The tool keeps no saved networks or history. Changing a setting clears the previous code so you cannot accidentally download outdated details. Clear removes the form values and current result; reloading the page starts over.
How to use this tool
- Choose the connection type that matches your router. WPA/WPA2 Personal is a common choice for a home or guest network.
- Enter the exact network name and password. Enable Hidden network if needed. Open and Enhanced Open networks do not need a password. For Easy Connect, paste the complete device-issued
DPP:URI instead. - Select Generate QR code. Correct any highlighted input errors. Options contains image size and error correction settings if you need them.
- Scan the preview with your phone and check that it offers the intended connection. The generator cannot test your router or the password.
- Download PNG and share it with your guests. Keep the white border intact when printing. Treat the image and copied QR data like the password they contain.
For example, use a fictional network named Home Guest with password example-password to try the controls. Replace both with your real settings before sharing.
Your tool data stays in your browser
This tool processes your data on your device. The text, files, or passwords you enter and the results it creates are not sent to our servers or any other server.
Page and asset requests still occur. Production pages also load Google Tag Manager, Cloudflare Web Analytics, and AdSense advertising; tool code does not send inputs or results to analytics or ads. See our privacy policy.
To inspect requests while using the tool, open your browser's developer tools and select Network. Try it with sample data.
Read How to check website network requests in Chrome, Firefox, Edge, and Safari.
Learn more
- Android Wi-Fi URI parser - how a reader interprets personal-network and Easy Connect QR data.
- QR code sizing - border and module sizing guidance from DENSO WAVE.
- node-qrcode - the bundled open-source encoder. UTF-8 scanner support varies; this library does not fully implement ECI character-set signaling.