Last weekend, my sister-in-law visited. She asked for the WiFi password. I said it out loud. She typed it. Wrong. I said it again. Still wrong. By the third attempt, I was spelling each character with a military phonetic alphabet I don't actually know.
That password is C0ffee&Milk!2024. Twelve characters. Two digits, an ampersand, an exclamation mark, mixed case. Strong. Awful to dictate.
There is a better way.
What a WiFi QR Code Actually Does
A WiFi QR code is a single code that, when scanned, hands the phone your network name and password and joins automatically. No typing. No typos. No spelling bees.
Under the hood, the code stores a string that looks like this:
WIFI:S:HomeNet_5G;T:WPA;P:C0ffee&Milk!2024;H:false;;
The S is the SSID. The T is the encryption type (WPA, WEP, or nopass). The P is the password. The H flag marks hidden networks. That tiny payload replaces every awkward conversation you'll ever have about your router.
Which Networks This Works On
Most modern phones support WiFi QR joining out of the box. iPhones running iOS 11 and later. Android devices going back to around Android 7. The scanner is built into the native camera app, so your guests don't need to install anything.
There's one wrinkle. The standard works cleanly for WPA2-Personal and open networks. WPA3-Personal uses SAE, which most QR scanners handle now, but older phones may still prompt for manual entry. WPA3-Enterprise (the 802.1X variant with a RADIUS server) is not supported by the simple WIFI: format, so corporate guests still need a different onboarding flow.
For home networks and small offices, you're fine.
How to Generate One Without Leaking Your Password
This is the part that matters. Plenty of "free WiFi QR code" sites exist. Most of them process your SSID and password on a server. You type your credentials into a web form, they build the code, they ship you back an image. Where does that data go? You don't know. Neither do I.
The safe approach is client-side generation. The password stays in your browser, the code is built with JavaScript, and nothing is transmitted. Our QR code generator does exactly this, and it's the same rule we apply across every NovelCrypt tool: sensitive input never leaves your device unless you choose to send it.
If you're evaluating any generator, look for two things. First, a privacy statement that says processing is local. Second, no network request in your browser's devtools when you hit the generate button. If you see a POST to some API with your SSID in it, close the tab.
A Real Setup: The Coffee Shop Counter
A friend runs a small cafe in Portland. Her network is BluebirdRoastery-Guest, password PourOver!2024. She used to hand-write the password on a chalkboard. Customers would misread it, ask the barista, hold up the line.
She printed a WiFi QR code at 3 inches square, laminated it, stuck it on every table. Scan to join. The chalkboard now says "Ask your phone, not us." The line moves faster. She stopped getting asked for the password roughly forty times a day.
That's the whole pitch. A one-time five-minute task removes a recurring annoyance forever.
Hidden Networks and Special Characters
Two edge cases trip people up.
Hidden networks don't broadcast their SSID, so a phone can't "see" them. The H:true flag in the WiFi string tells the scanner to join anyway. Most modern scanners honor it. A few older Android builds ignore the flag and fail silently, in which case the guest un-hides the network, joins, then re-hides it. Annoying, but rare.
Special characters in the SSID or password need escaping. Backslash, semicolon, comma, and colon are the ones to watch. A robust generator handles this for you. If yours doesn't, a network called Home;Office will produce a broken code that joins the wrong SSID or fails outright. Test with a second phone before you print.
Printing Tips So It Actually Scans
A QR code on a screen scans fine. A QR code on a smudged laminated card on a sunny patio is harder. A few rules keep it reliable.
Print at least 1.2 inches (30mm) wide for a code that encodes a typical WiFi payload. Bigger is always safer. Use matte laminate, not glossy, to cut glare. Keep contrast high: dark code on white or off-white background. Don't overlay a logo that covers more than 10% of the code, and never cover the three large square finder patterns in the corners.
For a deeper dive on sizing, error correction, and contrast, our QR code error correction and sizing guide walks through the numbers.
When Not to Use One
WiFi QR codes are convenient, not secret. Anyone who scans the code gets the password. So don't put the guest code on a sticker facing the sidewalk. Don't post it on a public Instagram story. Treat it the way you'd treat writing the password on a card, because that's exactly what it is.
For a guest network that's isolated from your main LAN, this is fine. That's the whole point of a guest network. For your main home network where your NAS and your laptop live, hand the code to people you trust, don't broadcast it.
The Two-Minute Version
Open the generator. Pick WiFi as the type. Enter your SSID, your password, your encryption type. Download the PNG. Print it. Tape it to the fridge. Done.
Your next dinner party will go smoother. Your sister-in-law will be impressed. You'll never spell your password out loud again.
