The Wi-Fi QR code format, decoded
Scan a Wi-Fi QR code with a plain text reader and you get a line like WIFI:T:WPA;S:MyNetwork;P:secret;;. That string is the whole code: network name, password and security type. Here is what each field means, how special characters are escaped, and a decoder you can paste one into.
Decode a WIFI: string
Paste a string that starts with WIFI:. It is parsed right here in your browser — nothing is sent anywhere.
Have a picture of the code instead of the text? Use the QR code reader — it decodes Wi-Fi codes into the same fields from your camera or an image.
The fields
The format was popularised by the open-source ZXing barcode library and is understood by the built-in camera on iPhone (iOS 11 and later) and on current Android phones. It is a list of KEY:value; pairs after the WIFI: prefix, ending with an extra ;. Field order doesn't matter.
| Field | Meaning | Values |
|---|---|---|
T: | Security / authentication type | WPA (WPA, WPA2 and usually WPA3 personal), WEP, or nopass for an open network |
S: | Network name (SSID) | Exactly as broadcast — case- and space-sensitive |
P: | Password | Omitted or empty for open networks |
H: | Hidden network flag | true if the SSID is not broadcast; omit otherwise |
So WIFI:T:WPA;S:MyNetwork;P:secret;; reads as: a WPA-secured network called MyNetwork whose password is secret.
Escaping rules
Because ; separates fields and : separates key from value, these characters must be preceded by a backslash when they appear inside an SSID or password: \ ; , : ".
Password: latte;art
Encoded: P:latte\;art;Forgetting to escape is the most common reason a hand-made Wi-Fi code "joins" with the wrong password. The Wi-Fi QR code generator escapes everything automatically.
Examples
WIFI:T:WPA;S:HomeNet;P:correct-horse-battery;; WPA/WPA2 network
WIFI:T:nopass;S:Library Free WiFi;; open network
WIFI:T:WPA;S:Studio;P:pa\:ss;H:true;; hidden SSID, escaped colon
WIFI:T:WEP;S:OldRouter;P:A1B2C3D4E5;; legacy WEPWPA3 and enterprise networks
For WPA3-Personal, T:WPA works on most phones, because WPA3 routers usually run in WPA2/WPA3 transition mode. Some Android devices also accept T:SAE for WPA3-only networks; if a T:WPA code fails on a WPA3-only network, that is the value to try.
WPA2/WPA3-Enterprise (802.1X) networks need extra fields such as E: (EAP method), I: (identity) and PH2: (phase-2 method). Phone support for these is inconsistent — enterprise Wi-Fi is normally provisioned through a configuration profile or device management instead of a QR code.
Privacy: the password is plain text
A Wi-Fi QR code is not encrypted. Any scanner app shows the password in clear text, and a photo of the code is as good as the password itself. Only print codes for networks you are happy to share — ideally a separate guest network.
If you found a string like this online (for example on a shared photo), treat it as someone else's credentials: joining a network you aren't authorised to use can be unlawful.
Make a Wi-Fi QR code
Enter your network name and password — escaping is automatic and nothing leaves your browser.
Open the Wi-Fi generatorFrequently asked questions
What does WIFI:T:WPA;S:;P:;; mean?
It is the text inside a Wi-Fi QR code. T is the security type (WPA), S is the network name and P is the password. Phones that scan it offer to join that network.
What does H:true mean in a Wi-Fi QR code?
H:true marks the network as hidden (its SSID is not broadcast), so the phone knows to probe for it. Leave it out for normal networks.
What does T:nopass mean?
The network is open — no password. The P field is omitted or left empty.
Why does my Wi-Fi QR code connect with the wrong password?
Usually a special character in the password was not escaped. Semicolons, commas, colons, quotes and backslashes must be preceded by a backslash inside the WIFI: string.
Do iPhones and Android phones read Wi-Fi QR codes?
Yes. The built-in camera on iPhone (iOS 11 and later) and on current Android phones recognises the WIFI: format and offers to join the network.