Scan-to-join stops staff reading passwords aloud all day — as long as you put the code on the right network and in the right place.
A WiFi QR code holds three things: the network name (SSID), the encryption type, and the password. They are stored as plain text inside the pattern, in a standard format that every phone camera understands. There is no server, no lookup and no login step — the phone reads the credentials and offers to join.
Be clear about the consequence: anyone who can photograph the code has your password. Any QR reader will display the raw text rather than joining, and a photo taken from across the room decodes just as well as a scan from the table. The code is a convenient way to hand out a password, not a way to protect one.
Treat a printed WiFi code exactly as you would treat the password written on a chalkboard — because that is what it is.
That is why this belongs on a guest network and nowhere else. Put the code on the network that reaches the internet and nothing else — no point-of-sale terminal, no back-office file share, no property management system, no printers, no cameras.
If your router supports client isolation on the guest SSID, turn it on so guests cannot see each other's devices either. If your guest and staff networks are currently the same network, split them before you print anything. A code that hands the whole building's password to every passer-by is worse than typing it out.
Pick WPA for anything modern. The WiFi code format uses one WPA setting that covers WPA and WPA2, which is what almost every current router runs. WPA3 is newer and support in scanners is less consistent, so if your access point offers a WPA2/WPA3 mixed mode, that is the safest setting for a public code.
| Network type | Use for a guest code? | Notes |
|---|---|---|
| WPA2 (or WPA2/WPA3 mixed) | Yes | The default choice; broadest phone support |
| WPA3 only | With testing | Secure, but some scanners still mishandle it |
| WEP | No | Obsolete and trivially broken; replace the router setting |
| Open / no password | Rarely | A code adds little; consider a captive portal instead |
If the guest network is hidden, the code must carry the hidden flag, otherwise phones will not find the network after reading it. Hidden SSIDs also demand an exact match on the name, including capitals and spaces — copy it from the router settings rather than typing it from memory.
One limit worth knowing before you print: a WiFi code joins the network, but it cannot log in to a captive portal. If your guests have to accept terms or enter a room number on a splash page, the code gets them onto the WiFi and the portal still appears.
The password is baked into the pattern, so rotating it invalidates every printed code at once. That is the trade-off for a code that needs no server and never expires: it works forever, but it points at exactly one password forever.
Plan around it. Decide a rotation schedule you can live with, count how many pieces you would have to replace, and keep the source file so a reprint is a print job rather than a redesign. Cafes that rotate the guest password monthly should think hard about how many table tents that really means.
Put it where someone sits down with a laptop, not only where they order. The counter is busy and people scan it while being handed a coffee; the table is where they actually need the network.
Hotels have two moments that matter: check-in and the first minute in the room. Cover both, because a guest who cannot get online in the room will call the front desk.
Both platforms handle WiFi codes natively, but not identically. On iOS, the camera app reads the code and shows a banner offering to join the network; the guest taps it and is connected. On Android 10 and later, the camera or Google Lens does the same, though on some manufacturer skins the prompt arrives as a notification the guest has to pull down and tap.
Older Android phones may need a QR reader app or may open the raw text instead of offering to join. Test with a couple of real handsets before a full print run, and put the network name and password in small text under the code so anyone whose phone does not cooperate can type it in.
Print at least 2 cm across for something read at arm's length, and keep 4 modules of clear background around the code. Matte laminate survives spills without the glare that makes gloss unscannable under downlights, and vector SVG output keeps the pattern crisp at any size.
Build a refresh habit. Table tents get coffee on them, desk cards get bent, and a code that scans in the print shop can fail after a month in service. Walk the floor once a month, scan a few codes yourself, and reprint the tired ones.
The code is generated in your browser, so the guest password is never uploaded anywhere — but once it is printed, it is public. Guest network only.
Free, no sign-up, and your code never expires.
Got your code? ☕ Buy me a coffee — it keeps this tool free for everyone.