A Wi-Fi QR code stores your network name, security type and password, so a guest can point their phone camera at it and connect without typing anything. It is safe to use when the code points to a separate guest network with WPA2 or WPA3 encryption and a password you change from time to time.
This guide explains what the code contains, where the real risks are, and how homes, cafés and offices can share Wi-Fi safely.
How a Wi-Fi QR code works
Unlike most QR codes, a Wi-Fi QR code does not usually contain a web link. It contains a short block of text in a standard format that phones understand. In simplified form, it looks like this:
WIFI:T:WPA;S:CafeGuest;P:yourpassword;;
The letters mean:
- T is the security type (for example WPA for password-protected networks, or nopass for an open network).
- S is the network name (SSID).
- P is the password.
- An optional H field says whether the network name is hidden.
When a phone camera reads this text, it offers to join the network. Most recent iPhones and Android phones can do this from the built-in camera app, with no extra app needed.
The important catch: the password is not hidden
The password inside a Wi-Fi QR code is stored as plain text. It is not encrypted or scrambled. Anyone who scans the code with a general scanner app, or with an online tool such as our QR code scanner, can read the password in full.
In practice this means:
- Treat a printed Wi-Fi QR code exactly as if you had printed the password on the wall.
- Anyone who photographs the code can share it, and the people they share it with can join too.
- If you would not be comfortable writing the password on a sticky note in the same spot, do not put the QR code there either.
This is not a reason to avoid Wi-Fi QR codes. It is a reason to decide carefully which network you share with them.
Use a separate guest network
The single most useful step is to share a guest network instead of your main one. Most modern home routers and nearly all business routers offer a guest network option in their settings.
A guest network helps because:
- Guests get internet access but, when client isolation is enabled, cannot see your computers, printers, cameras or file shares.
- You can change the guest password without reconnecting all of your own devices.
- If someone misbehaves or the password leaks, the damage is limited to a network that holds nothing private.
When you set it up, look for options with names like "guest network", "client isolation", "AP isolation" or "allow guests to access local network". Turn isolation on and local network access off. Exact wording varies by router brand, so check your router's manual if you are unsure.
For a business, keep payment terminals, point-of-sale systems, security cameras and staff computers on a different network from the one printed on tables.
Choose strong encryption: WPA2 or WPA3
The security type you choose in your router matters more than the QR code itself.
- WPA3 is the newest standard and the best choice when all your devices support it.
- WPA2 (with AES) is still widely used and acceptable when paired with a long, unique password.
- WPA2/WPA3 mixed mode is a practical middle ground when some guests have older phones.
- WEP and the original WPA are outdated and should not be used.
- Open networks with no password let anyone nearby connect, and traffic between the phone and the router is not protected by Wi-Fi encryption.
Pick a password that is long and not easy to guess. Because guests will scan rather than type it, length costs you nothing. A random phrase of several words or a string of 16 or more characters is far stronger than a short word with a number on the end.
Rotate the password on a schedule
A printed code lives on long after the people who scanned it have left. Former staff, previous tenants or a customer who photographed the code months ago can still connect if the password never changes.
A simple routine works well:
- Decide how often to change the guest password, for example every month or every few months for a busy café, or whenever you feel it has spread too widely at home.
- Change the password in your router's guest network settings.
- Create a new Wi-Fi QR code with the new password.
- Replace every printed copy, including table cards, menus and the sign at the counter.
- Test the new code with two different phones before the old ones go in the bin.
You can make a fresh code any time with our Wi-Fi QR code generator.
Where to place the code
Placement is part of security. A few practical guidelines:
- Home: keep the code inside, for example on the fridge or in a guest room, not on a front door or window visible from the street.
- Café or restaurant: put it on table cards or at the counter, where customers see it but passers-by outside do not.
- Office: place it in the reception or meeting area for visitors, and never print the staff network.
- Rentals and guesthouses: include it in the welcome folder and change the password between long-term guests.
Because people may photograph public QR codes, also check now and then that your printed codes have not been covered by someone else's sticker. Our guide on protecting printed QR codes from tampering explains what to look for.
Tips for guests who scan Wi-Fi codes
If you are the one scanning, a little care goes a long way:
- Before joining, look at the network name your phone shows. If you expected "Cafe-Guest" and see something unrelated, ask staff.
- Be cautious with open, password-free networks in public places, and prefer websites that use HTTPS.
- Avoid logging in to banking or other sensitive accounts on networks you do not trust.
- Remove saved networks you no longer use, so your phone does not reconnect automatically later.
For more everyday advice, see our mobile security tips.
FAQ
Can someone see my Wi-Fi password from the QR code?
Yes. The password is stored as plain text inside the code, so any scanner app can display it. That is why it is best to share a guest network rather than your main one.
Do Wi-Fi QR codes expire?
No. A Wi-Fi QR code keeps working until you change the network name or password. To revoke access, change the password in your router and print a new code.
Do I need an app to scan a Wi-Fi QR code?
Usually not. Most recent iPhones and Android phones can read Wi-Fi QR codes directly with the built-in camera and offer to join the network.
Can a Wi-Fi QR code be dynamic?
No. A phone joins Wi-Fi straight from the text inside the code, without visiting a website, so there is no short link to update. When the password changes, you need a new code.
Sharing Wi-Fi by QR code is quick, friendly and, set up properly, safe. Create a guest network, choose WPA2 or WPA3, and make your code with the free Wi-Fi QR code generator on QR-TH. When you change the password, simply generate and print a new one.