How WiFi QR Codes Actually Work

A WiFi QR code contains a short string of text that your phone's camera reads and interprets. That string follows a specific format:

WIFI:T:WPA;S:MyCafeWiFi;P:coffee123;;

Here's what each part means:

  • WIFI: โ€” tells the phone this is a WiFi connection, not a URL or contact card
  • T: โ€” encryption type. WPA, WEP, or nopass (for open networks)
  • S: โ€” the SSID. Your network name. Case-sensitive, spaces are fine
  • P: โ€” the password. Also case-sensitive
  • ;; โ€” end-of-field marker. Required, even if it looks redundant

When someone points their iPhone or Android camera at the QR code, the operating system recognizes the WIFI: prefix and pops up a notification: "Join [Network Name]?" One tap. Connected.

No app download. No typing 16-character passwords with uppercase, lowercase, numbers, and special characters on a phone keyboard. If you've ever watched a customer squint at a "WiFi Password: Tr4vel1ngH0spitality2024!" sign and type it wrong three times, you understand why this matters.

Generate a WiFi QR Code in 30 Seconds

  1. Go to our WiFi QR Code Generator
  2. Enter your network name (SSID) โ€” type it exactly, including capitalization
  3. Select your encryption type (WPA2/WPA3 is what most modern routers use)
  4. Enter your WiFi password
  5. Click generate. Download the PNG.

That's it. The PNG you downloaded can be printed at any size, added to signage, menus, table tents, or reception desk cards. The QR code format is an open standard โ€” it'll work with any phone that has a camera, iOS or Android, no special app required.

๐Ÿ’ก Pro tip: Generate your QR code at a high resolution (at least 1000ร—1000 pixels). You can always scale down. Scaling up a low-res QR code creates blurry edges that cause scan failures, especially in dim restaurant lighting.

The Encryption Type Field โ€” Why It Matters

QR codes can encode four WiFi encryption types: WPA, WPA2, WEP, and nopass. Here's which to use:

EncryptionQR Code ValueWhen to Use
WPA2/WPA3 PersonalWPAStandard for 99% of businesses. Use this.
WEPWEPLegacy routers only. If your router supports WPA2, don't use WEP. It's trivially crackable.
Open / No PasswordnopassPublic networks with captive portals. The QR code connects to the network; the portal handles auth separately.

Note: the QR code standard uses WPA as the value for all WPA-family encryption (WPA, WPA2, WPA3). Your phone will negotiate the actual protocol with the router. Don't overthink this โ€” if your router uses WPA2 or WPA3, put WPA in the QR code.

Where to Display Your QR Code

Where you put the QR code is as important as generating it correctly. Based on scan data from hospitality businesses:

LocationScan RateNotes
Table tents / table numbersHighestGuest is already sitting, phone is out. Natural moment to scan.
Reception / host standHighGuest is waiting. Eye-level signage works best.
Menu (inside or back cover)Medium-HighGuest opens menu immediately. QR on the back cover is unobtrusive.
Wall near entranceMediumPeople walk past. Good for branding, lower scan rate.
Receipt / bill folderLowGuest is leaving. Too late for WiFi access.
Hotel room key card sleeveHighest (hotels)Guest checks WiFi immediately upon entering room.
โš ๏ธ Don't put your WiFi QR code here: Bathroom stalls (bad lighting), ceilings (too far to scan), exterior windows facing the sun (glare kills QR code readability). Also: don't post it on Instagram. That's how you get 500 neighbors on your network.

QR Code Design Rules

A poorly designed QR code won't scan. These rules aren't optional:

  • Quiet zone: Leave at least 4 modules of white space around all four sides of the QR code. For a 2cm QR code, that's roughly 8mm of margin. If you print the QR code edge-to-edge on a card, guests will wave their phones at it for 20 seconds before giving up.
  • Contrast: Dark modules on a light background. Black on white is best. Dark blue on white works. Light gray on white does not. Your phone camera needs contrast to distinguish the pattern.
  • Minimum size: 2cm ร— 2cm for table tents (close range). 5cm ร— 5cm for wall signage (further away). A QR code on a billboard needs to be massive.
  • Logo in center: If you add a logo, keep it under 30% of the total QR area. QR codes have built-in error correction โ€” a small logo won't break scanning, but a large one will.
  • Don't distort: Print at the original aspect ratio. Stretching a QR code to fit a rectangular space breaks the square grid pattern.

The Security Mistake Most Businesses Make

Here's the mistake: generating a WiFi QR code, then emailing it to the print shop as an attachment.

Your WiFi password is now sitting in:

  • The print shop's email server (unencrypted, probably)
  • The designer's downloads folder
  • A shared Dropbox folder called "Client Print Assets"
  • Whatever cloud backup the print shop uses

Anyone with access to any of those locations can decode the QR code in 2 seconds. WiFi QR codes are not encrypted โ€” they're just the network credentials encoded as text. Scanning the QR code with any QR reader app reveals the full password in plain text.

The fix: Create a separate "guest" WiFi network with a password you don't use for anything else. If the guest network password leaks, your POS system, security cameras, and office computers are still on a separate, isolated network. Modern routers (even consumer-grade ones) support guest networks โ€” set one up. It takes 5 minutes.

๐Ÿ” Security rule: Never use the same WiFi network for guests and business operations. A guest who joins your network can potentially see other devices on it โ€” including your POS terminal, network printers, and NAS drives. Guest network isolation is your first and best security line.

Static vs Dynamic WiFi QR Codes

Static QR codes encode the WiFi credentials directly in the QR pattern. If you change the password, you need to reprint every QR code.

Dynamic QR codes encode a URL that redirects to the WiFi credentials. When the user scans, their phone opens the URL, which serves the WIFI: string. If you change the password, you update the URL's redirect โ€” no reprinting needed.

When to use static: Your password won't change. You're printing 20 table tents. The QR code works without internet access (the phone doesn't need to load a URL to connect).

When to use dynamic: You rotate passwords. You're printing 500 key cards for a hotel. A dynamic QR lets you change the password monthly without reprinting anything โ€” but it requires the guest to have internet access to load the redirect URL, which creates a chicken-and-egg problem for some international travelers without roaming data.

For most small businesses: static is fine. Generate a strong guest network password once, print the QR codes, and don't overthink it.

How to Test Before You Print 500 Copies

  1. Generate the QR code and print one copy at the size you intend to use
  2. Test with an iPhone (iOS camera app โ€” point and wait for the yellow notification)
  3. Test with an Android phone (Google Lens or camera app โ€” depends on manufacturer)
  4. Test in the actual lighting conditions of your space. Restaurant dinner lighting is different from a bright hotel lobby
  5. Test from the distance guests will scan from. A table tent QR is scanned from ~30cm. A wall sign from ~1.5m
  6. Test with a cracked screen. Seriously โ€” a significant percentage of your customers have cracked phone screens, and screen damage can interfere with QR scanning

If all six tests pass, you're good to print the full batch.

๐Ÿ’ก Final tip: Add a small text label under the QR code: "Scan to connect to WiFi" or "Point camera here for free WiFi." Not everyone knows their phone can scan QR codes natively. The text label increases scan rates significantly โ€” one hotel chain reported a 40% increase in WiFi connections after adding the instruction text.

Ready to create yours?
Generate WiFi QR Code โ†’