How to Make a WiFi QR Code for Guests (and Keep It Safe)
A WiFi QR code lets a guest join your network by pointing a phone camera at a square, with no password to read out or mistype. For a cafe, a clinic waiting room or a rented flat, that saves a lot of repeated questions at the counter.
The convenience has a catch. The code carries the password itself, so anyone who can see the printed square can read the password from it. This guide explains what the code contains, how phones handle it, and a sensible setup that keeps your main network out of reach.
What is inside a WiFi QR code
The code is only text, written in a small, widely used format. According to the ZXing barcode-contents wiki, it starts with WIFI: and then lists fields separated by semicolons. T is the security type (WEP, WPA or WPA2-EAP, or nopass for an open network), S is the network name, P is the password, and H is an optional flag for a hidden network. The wiki gives this example: WIFI:T:WPA;S:mynetwork;P:mypass;;
Two details matter in practice. First, the password sits in the text in plain form, so there is no protection in the code itself. Second, the characters backslash, semicolon, comma, double quote and colon must each be escaped with a backslash. A network name or password that contains a semicolon will fail unless the generator handles this, so test any code you make.
How phones read it
On an iPhone, a published guide from iDownloadBlog says the Camera app can scan a WiFi code. The Scan QR Codes setting sits under Settings, then Camera. Open the Camera in Photo mode, point it at the code, and tap the yellow Join button that appears at the bottom of the viewfinder.
Android support varies by device and version, so check one or two common handsets before you print anything. Some guests may not be able to scan at all, so keep the network name and password written somewhere handy as a fallback.
The security and privacy trade-offs
A code on the wall is a password on the wall. Anyone in view of the poster, including people outside a window or in a photo someone posts online, can scan it later. If the code opens your main network, that person is on the same network as your billing computer, CCTV recorder, printer and staff phones.
The practical fix is to limit what the code can reach and how long it stays valid. Put guests on their own network, use a password you can change without disruption, and treat a change of password as a routine job rather than an emergency. Also avoid reusing the password you use anywhere else, since the code makes it readable to every scanner.
A sensible setup for a home, cafe or office
Most business routers can run a second, separate guest network. Turn it on, give it a clear name such as Cafe-Guest, set a strong password, and, where your router offers it, switch on the option that stops guest devices from seeing other devices. Keep staff, billing and camera equipment on the main network, whose password never appears in a code.
For a home, the same idea works for visitors and tenants. For an office, a guest network keeps client phones away from shared drives. For a cafe, it also means a regular who knows the password cannot get into your point-of-sale tablet.
Step by step, with a checklist
Steps: 1) Create the guest network on your router and note its exact name, security type and password. 2) Generate the code with a WiFi QR tool, entering those values exactly. 3) Scan it with an iPhone and an Android phone to confirm both join. 4) Print it at a readable size on a matt surface, with the network name beneath in words. 5) Put a reminder in your calendar to change the password every few months.
Checklist before you print: the code joins the guest network and not the main one. Guest devices cannot reach staff equipment. The network name and password are also written beside the code. You have tested the code on at least two different phones. You know who will update the poster when the password changes. If you use a tool such as Tapqode, its page lists WiFi as a QR type, says it is free, and says no sign-up is needed to download. It also says free codes show a short ad page when scanned and that Pro removes ads, so check how your WiFi code behaves on a test phone before printing.
Sources and further reading
Frequently asked questions
Does a WiFi QR code store my password?
Yes. In the common format, the password is written as a P field inside the text of the code, so anyone who scans it can read it. Treat the printed code as you would a printed password.
Which security type should I choose?
Choose the type your router uses for that network. The format accepts WEP, WPA or WPA2-EAP, or nopass for an open network. Check the exact setting in your router and match it in the generator.
What if my password has special characters?
Backslash, semicolon, comma, double quote and colon need a backslash escape in the code. A good generator does this for you, but scan a test code on a phone to be sure it joins.
Can I make an open network with no password?
The format allows nopass, but an open network lets anyone within range connect, with no password at all. For a business, a guest network with a password gives you more control.
How often should I change the guest password?
There is no fixed rule. Change it whenever staff leave, when the code has been photographed publicly, or on a regular schedule such as every few months, then reprint the code.
Have something worth building?
Tell us what you're trying to make happen. We'll reply with a plan, not a brochure.
Start a project