WiFi QR code generator

A WiFi QR code generator writes the network setup for a camera

A phone can join a network from a QR code because the code contains a short, structured line: the security type, network name, password and whether the network is hidden. This generator writes that line and turns it into the square pattern above. It does not contact the router, test the password or create a redirect. The code is static; what you enter is what somebody's camera reads.

Choose WPA/WPA2 for almost every password-protected home, studio or office network. WEP is included for older equipment that genuinely uses it, not as a recommendation. Open means there is no password at all, so the password field disappears rather than pretending to affect the result. If the access point hides its name, turn on Hidden network so the code carries that fact as well.

Three security types are supported, because they are the ones the Wi-Fi QR format expresses and phone cameras read dependably: WPA/WPA2, WEP and open. A WPA3-Personal network normally joins from the same WPA/WPA2 choice, since most routers keep a WPA2/WPA3 transition mode; a standalone WPA3-only (SAE) network or an enterprise 802.1X login is not offered here, because camera support for those payload variants is inconsistent and a code that cannot be joined is worse than none. The generator also holds the network name to the 32 bytes that Wi-Fi itself allows and a WPA/WPA2 password to its 8–63 characters, and it tells you the length you entered rather than silently trimming it, so the finished code never describes a network no access point could accept.

Why punctuation in the password needs special handling

Wi-Fi QR data separates fields with semicolons and uses colons inside those fields. A network called Studio; North cannot simply be pasted between the separators: a scanner would read the semicolon as the end of the name. Backslashes, semicolons, commas, colons and quote marks are escaped before the QR matrix is built. A name or password written entirely in hexadecimal digits — a purely numeric password is the common case — is wrapped in double quotes instead, following the same grammar, so a scanner reads it as text rather than as raw hex bytes. The visible name and password are not changed, and Unicode names such as Café 北 are encoded as UTF-8 rather than losing their non-ASCII characters.

That exactness is why the finished image should be tested before it goes on a wall or welcome card. The local QR code scanner reveals the exact WiFi payload without joining the network; camera apps still differ in how they confirm old WEP networks and hidden access points. A successful scan proves that the image can be decoded; only joining proves that the security choice and password match the router.

SVG for print, PNG for documents

Both downloads come from the same module matrix. The SVG uses integer vector squares, so a designer can resize it for a sign without softening the edges. The PNG assigns a whole number of pixels to every module, at least four and as many as fit the size you pick (up to 512, 1,024 or 2,048 pixels), which keeps the pattern crisp in documents, messages and ordinary image editors. A four-module white quiet zone surrounds both versions. Do not crop that border, place a logo over the center or recolor individual squares: all three make a correct payload harder to scan.

This is a purpose-specific QR code, not a product barcode. For an ordinary URL, text, colors or a logo, use the general QR code generator; it verifies the styled raster but does not assemble Wi-Fi fields. If the job is to turn an existing GTIN-12 into retail bars, the UPC generator uses a different symbol, check digit and print geometry. Putting Wi-Fi credentials into UPC bars, or a UPC number into this network format, would create an image that is valid in the wrong language.

The password stays local, but the printed code is the password

The encoder is bundled with this site and fetched from the same origin only once you start filling in the network. It runs in this tab, the PNG is drawn on a local canvas, and neither the network name nor password is sent to CreatorValet, an analytics service or a dynamic QR provider. Reloading the page clears the form and the temporary image URLs.

Local generation does not make a shared code secret. Anyone who can photograph or scan the finished image can recover the credentials it contains. Put a guest-network code where guests may see it, avoid displaying the administrative network's password, and replace the printed code when that password changes. The privacy advantage here is narrower and verifiable: a generator service never receives the credential while you make the image.