WiFi QR Code Generator

The WiFi QR code format began as a convention of the open-source ZXing barcode library and was formally defined by the Wi-Fi Alliance in its WPA3 Specification (version 3.0, December 2020). It turns "scan to connect" into a real feature on every modern phone. The format itself is just a text string that starts with the prefix WIFI: followed by semicolon-separated key-value pairs — T: for security type, S: for SSID, P: for password, and an optional H:true for hidden networks. Encoded as a QR code, this string becomes a scannable image that current iPhone and Android cameras, and most QR scanner apps, recognise as a WiFi credential — prompting the user with a one-tap "Connect to NetworkName?" dialog instead of asking them to type the password.

The exact format, with escape rules

The canonical example is WIFI:T:WPA;S:MyHomeWiFi;P:S3cr3t!;; — note the double semicolon at the very end, which acts as the terminator. In ZXing's format, which this tool writes and phone cameras read, special characters inside SSID or password (colon, semicolon, comma, backslash, quote) are backslash-escaped: a password containing a literal semicolon (Pa;ssword) is written as P:Pa\;ssword. For open networks (no password), set T:nopass and omit the P: field entirely. For WEP networks, ZXing uses T:WEP; the Wi-Fi Alliance's definition deliberately leaves WEP out, and it percent-encodes special characters (%3B for a semicolon) rather than backslash-escaping them. The tool above handles the escaping automatically.

Where this is genuinely useful

Cafes, restaurants, AirBnBs, hotels, co-working spaces, doctor's waiting rooms, and event venues — anywhere guests need to connect to WiFi briefly. A small printed WiFi QR card on the reception desk does the job. The alternative — a hand-written password card you ask the customer to type — is slow, error-prone, and screams "we don't care about your experience." A QR sticker turns the same friction into a one-tap action. For corporate guest WiFi where the password rotates daily, generate a fresh QR every morning; the labor cost is one print job.

What this is not — and the security implications

A WiFi QR code is just a printed copy of your password in QR-encoded form. Anyone who photographs it can decode it. That's not actually a problem for most use cases — your password is already exposed to every device you've granted access to, and the threat model for a printed cafe QR is no worse than a printed-out password card. But it does mean: don't print and post your corporate-LAN QR publicly. Use a dedicated guest network (segregated VLAN, separate SSID, rate-limited, isolated from production resources). Most SME-grade routers (TP-Link Omada, Ubiquiti UniFi, ASUS AiMesh) support guest networks natively — the right setup is a guest SSID with a regularly rotated password, distributed via QR, completely separate from your main network where work devices live.

ASEAN-specific notes — Singapore, Malaysia, Indonesia

Two quick regional notes. First, Singapore's Wireless@SG public WiFi has no shared password to encode — IMDA's set-up guide connects users with their local or foreign SIM card — so a WIFI: QR sticker cannot join it. Second, many ASEAN SME routers ship with default SSIDs of the form TP-LINK_XXXX or UniFi-XXXX; rename to your brand before generating the QR so customers see something memorable on their phone's network list.