Wi-Fi QR code: share your Wi-Fi without ever saying the password

The moment everyone asks for the Wi-Fi

A guest walks in, pulls out a phone, and asks the ritual question: “what’s the Wi-Fi password?” You spell out sixteen characters, checking each symbol; they mistype the third one; you start over. Multiply the scene by every guest, customer, or short-term tenant, and a printed Wi-Fi QR code becomes an obvious fix: scan once, you’re online.

There is no magic involved. The QR code simply holds a text string in an agreed format — the WIFI: format — that phones know how to interpret. Understanding that format takes two minutes and lets you debug a failing code yourself.

What a Wi-Fi QR code actually contains

Decoded, a Wi-Fi QR code looks like this:

WIFI:T:WPA;S:MyBox_5G;P:mY-pa55word;;

Each field is a letter:value pair separated by semicolons:

• T: — the network security type: WPA, WEP, or nopass for an open network.
• S: — the SSID, the network name exactly as it appears in the available-networks list.
• P: — the password, in plain text.
• Trailing ;; — the string ends with an empty field that closes the last pair.

The format also accepts an optional H:true field marking a hidden network (one that does not broadcast its SSID). Most home and office networks don’t need it.

Escaping: the detail that breaks hand-made codes

Because fields are separated by semicolons, a semicolon inside the SSID or password would break parsing — the phone would think a new field has started. The convention therefore escapes certain characters with a backslash. FlashScan Pro’s generator escapes \, ;, ,, :, " and ' automatically.

In practice, if your network is named Home;Guests, the generated payload contains S:Home\;Guests — the inner ; is neutralized and the code stays valid. This is the number-one cause of home-made Wi-Fi QR codes that fail: an SSID with an apostrophe or a password containing : encoded without escaping produces a pattern phones reject.

Open networks: the nopass case

For a network with no password — a hotel captive portal, a café guest network — the format changes: T: takes the value nopass and the P: field disappears entirely:

WIFI:T:nopass;S:Cafe-Guest;;

A code like this joins the device without prompting for anything. It is handy for steering customers to the right SSID, but remember that an open network does not encrypt traffic between the device and the access point.

Create the code in three steps

1. Open the FlashScan Pro generator and pick the Wi-Fi mode.
2. Type the network name (SSID) exactly as written, capitalization included, then the password. The app assembles the WIFI: payload with correct escaping — the “copy” button even lets you inspect the raw string it produced.
3. Download the PNG for immediate use, or the SVG if the code is going to a printer: vector output resizes without any quality loss.

The form produces a WPA-type code, which covers password-protected WPA, WPA2, and WPA3 networks — virtually every current router and ISP box. Before printing it big, test the code by scanning it with a phone other than your own.

The security point online generators skip

A Wi-Fi QR code on the wall is your password on the wall. The P: field is plain text: any scanner can extract it from the pattern. Three practical consequences:

• Pick the spot carefully: a code inside a home or behind a counter has a very different exposure than one visible from the street.
• Prefer a guest network: most routers allow a secondary network isolated from your own devices. Put the QR code on that network, not on yours.
• Rotate and regenerate: when you change the password, the old code dies — which is actually useful: you “revoke” access by rotating the key and replacing the print.

Finally, check where you generate the code: online generators that work server-side receive your password. FlashScan Pro builds the payload and the image entirely in your browser — the password never crosses a server.

Reading the payload yourself

Curious what a Wi-Fi code really contains before sharing it? Scan it with a tool that shows the decoded content: the WIFI: string appears in plain text, fields and escaping included. It’s the quickest way to audit a code you generated — or one someone handed you — before printing or trusting it. FlashScan Pro’s scanner displays exactly that raw payload and opens nothing without your action.

Going further

WIFI: is only one of the payloads a QR code can carry: the full tour (URL, tel:, mailto:, vCard…) is in QR code payload types. Before printing, review the size and quiet-zone rules, and to verify a scan leaks nothing online, the method is in scanning without uploads.