QRpilot
← All guides
WI-FI GUIDE

How Wi-Fi QR codes work

Understand the Wi-Fi QR text format, security fields, escaping rules, and compatibility limitations before printing a code.

Written and manually reviewed by the QRpilot maintainer · Last reviewed August 17, 2026

A Wi-Fi QR code is not a remote login service. It is a compact text record containing a network name, security type, password, and optional hidden-network flag. A compatible phone reads those fields and offers to join the network.

The payload inside the squares

A typical payload follows the pattern WIFI:T:WPA;S:Network;P:Password;H:false;;. T identifies the security type, S is the SSID, P is the password, and H tells the scanner whether the network is hidden. QRpilot builds this text locally and then converts it into the black-and-white module pattern.

The QR image does not contact QRpilot when scanned. It also cannot verify that the network exists. If the SSID, password, or security type is wrong, the code can still be structurally valid while the connection fails.

  • WPA is the normal choice for WPA, WPA2, and many WPA3 transition-mode networks.
  • WEP is retained for legacy equipment but should not be chosen for a modern network.
  • Open networks omit the password field and use the nopass security value.

Why special characters matter

The Wi-Fi text format uses semicolons, colons, commas, quotes, and backslashes as syntax. When those characters occur inside an SSID or password, they must be escaped so a scanner treats them as data. QRpilot escapes these characters before generating the code.

Byte limits and character counts are not always the same. Non-ASCII characters can occupy multiple UTF-8 bytes, so QRpilot validates the SSID using its encoded byte length rather than assuming every visible character consumes one byte.

Test before sharing

Generate the code, scan it with a second device, and confirm the device joins the intended network. Test both iOS and Android when the code will be used by the public because scanner behavior varies by operating-system version and device vendor.

  • Keep a clear quiet zone around all four sides.
  • Use a dark foreground on a plain light background.
  • Do not post a private network password where untrusted visitors can scan it.
  • Create a guest network when the code will be displayed publicly.