2026-04-20
Wi-Fi QR codes and secrets
What a WIFI: payload contains, why the password is visible to anyone who scans, and what QRNest refuses to store.
A Wi-Fi QR code uses a text format that starts with WIFI:. It includes the security type, the network name, the password, and whether the network is hidden. Special characters such as semicolons and commas are escaped so the fields do not run together.
Anyone who scans the code, or who runs a decoder on a photo of it, receives the password. That is how phones join the network without typing. Treat the printed card like a password written on paper. Use a guest network, not the password for your router admin page.
QRNest builds that string in the browser. The form does not submit the SSID or password to create the image. The scan check and the file download also stay on the device.
QRNest does not store the network name or the password. The form does not send them anywhere. When the guest password changes, make a new code and replace the old card. A picture cannot update itself.
Hidden networks are an option in the form. Hiding the SSID is not access control. The name is still inside the QR payload, and it is still visible to anyone who scans.