What a WiFi QR code contains

A WiFi QR code is not a remote login service. It contains a structured text payload with the network name, security type, password when one is required, and an optional hidden-network flag. Compatible phones recognize that structure and offer to join the network after the person scans it.

The convenience comes with an important consequence: the credentials are inside the code. Anyone who can scan, photograph, or decode a displayed WiFi QR code may be able to read the password. Use a guest network rather than exposing a private staff or infrastructure network.

Collect the exact network details

Find the network name, or SSID, in the router or access-point settings. Capitalization, spaces, punctuation, and hidden characters matter. Do not rely on a handwritten label if the network has been renamed since the router was installed.

Match the security choice to the network configuration. WPA or WPA2 is common for password-protected guest networks, WEP is an older option, and an open network uses no password. If the SSID is hidden, enable the hidden-network setting; otherwise leave it off.

  • SSID: copy it exactly, including spaces and case.
  • Security: choose the mode configured on the network.
  • Password: enter the current guest password, not the router admin password.
  • Hidden network: enable only when the SSID is intentionally hidden.

Generate the code locally

Open the WiFi generator, enter the details, and watch the preview update. Qraftt escapes punctuation that has a special meaning in WiFi QR payloads, such as semicolons and backslashes. The completed code is created in the browser; the network name and password are not sent to a Qraftt database.

Choose a high-contrast foreground and background. If the code will sit near a kitchen, workshop, reception desk, or outdoor area where it may become dirty, a higher error-correction level can help—but it can also make the symbol denser, so allow more physical space.

Test a real join, not just a scan

Use a phone that is not already connected to the network. Scan the preview, accept the join prompt, and verify that the device receives access. A phone that remembers the network can hide an incorrect password because it may connect with credentials saved earlier.

Repeat the test with at least one other device type if guests use a mix of iOS and Android. Then test the exported or printed version. If the camera sees the code but the join fails, recheck the SSID, security choice, password, and hidden-network setting before changing the visual design.

Place and protect the code responsibly

Display the code where intended guests can reach it, but avoid public windows, street-facing signs, or unrestricted online posts unless the network is designed for that exposure. A QR code does not add access control; it only makes the embedded credentials easier to use.

Label the network clearly and provide a small amount of context, such as “Guest WiFi.” Keep the quiet zone clear, use a matte surface where possible, and place the sign where a phone can be held steady without blocking a queue or workspace.

Plan for password changes

A static WiFi QR code cannot update itself. When the SSID, password, or security mode changes, create a new code and replace every displayed copy. Remove old signs promptly so visitors do not waste time trying obsolete credentials.

For a business, keep a short list of where codes are installed: reception, meeting rooms, menus, welcome books, and event displays. That inventory turns a password rotation from a scavenger hunt into a predictable maintenance task.

Put it into practice

Relevant QR generators

Technical references