WIFI: URI scheme (ZXing / MECARD specification): WIFI:T:<security>;S:<ssid>;P:<password>;H:<hidden>;;. When scanned by an iOS (Camera app), Android (Quick Settings / Google Lens), or Windows camera, the operating system directly invokes native Wi-Fi networking APIs to authenticate and associate with the access point without requiring the user to manually type complex passphrases.
- 100% Offline Cryptography: Unlike commercial QR generators that secretly route your QR code through tracking redirect URLs (which break after 14-day trials), Router Portal executes pure client-side mathematical matrix generation. Your credentials never leave your browser.
- WPA3-SAE vs. WPA2-PSK: Modern routers running WPA3-Personal encode security type
T:SAE;; legacy WPA/WPA2 networks useT:WPA;. Our generator automatically pairs with transition mode. - Hidden SSID Support (H:true): Enabling the hidden network toggle adds
H:true;, instructing client smartphones to transmit active probe requests rather than passively scanning beacon frames. - Reed-Solomon Error Correction: Supports Level M (15% damage recovery) up to Level H (30% damage recovery), ensuring high scan reliability even when printed on rough cafe tent cards or paper menus.
Home_Guest_WiFi
WIFI:T:WPA;S:Home_Guest_WiFi;P:SecretPassphrase2026!;H:false;;
Section 1: The Architecture of the WIFI: URI Scheme (MECARD Specification)
Wireless local area network QR codes operate on a strict, globally recognized protocol originally codified by NTT Docomo and formalized in the ZXing Wi-Fi Network format. The payload follows a deterministic key-value string encapsulated by double semicolons:
WIFI:T:<Security>;S:<SSID>;P:<Password>;H:<Hidden>;;The parser processes five fundamental parameters:
T:Authentication Protocol: Designates the Layer-2 security protocol. Values areWPA(for WPA-Personal, WPA2-PSK, and WPA3-Personal Transition mode),SAE(for strict WPA3-Personal Simultaneous Authentication of Equals),WEP(for legacy 64-bit or 128-bit WEP), ornopass(for unencrypted open Wi-Fi networks).S:Service Set Identifier (SSID): The human-readable wireless network broadcast name (up to 32 octets). Special ASCII characters (such as semicolons;, colons:, backslashes\, and commas,) must be escaped with a preceding backslash (e.g.,\;) to prevent string delimiter collisions.P:Pre-Shared Key / Passphrase: The plaintext network password (8 to 63 ASCII characters for WPA/WPA2/WPA3, or 64 hexadecimal characters). Omitted entirely ifT:nopass;is defined. Protect your passphrase further with our Wi-Fi Password Strength & Crack Time Estimator.H:Hidden Network Flag: Set totrueorfalse. Informs scanning cameras whether the access point broadcasts beacon frames containing its SSID name or requires directed probe requests.;;Dual Delimiter Terminator: Required by the specification to signal the end of the Wi-Fi metadata block to the smartphone scanner parser.
Section 2: Why Cloud QR Generators Are a Serious Security Hazard
Most top-ranking commercial QR code generators on Google search results (such as qr-code-generator.com, me-qr.com, and various online converters) utilize Dynamic QR Codes. Rather than encoding your Wi-Fi credentials directly into the QR matrix, they generate a QR code containing an external redirect URL pointing to their own cloud servers (e.g., https://track.qr-vendor.com/redir/xyz123):
- Credential Harvesting Risk: Entering your private Wi-Fi SSID and password into a cloud generator transmits your network credentials across the public internet to third-party marketing databases without your consent.
- The 14-Day Paywall Trap: Commercial vendors allow dynamic QR codes to function for only 14 to 30 days before deactivating them. Once deactivated, the QR code redirects guests to a paywall page demanding $9.99/month, breaking your printable signs and table tents.
- Router Portal Offline Architecture: Our Wi-Fi QR Code Engine executes 100% locally inside your web browser using pure JavaScript matrix math. Zero bytes of network traffic leave your device. The generated QR codes are static, permanent, completely private, and will function forever without expiring.
Section 3: WPA2-PSK vs. WPA3-SAE in QR Codes: Camera Compatibility
When creating a QR code for a modern Wi-Fi 6, 6E, or Wi-Fi 7 router, choosing between T:WPA; and T:SAE; requires careful consideration of client device hardware generations:
- WPA2/WPA3 Transition Mode (Recommended): Setting
T:WPA;is compatible with virtually 100% of modern consumer smartphones, including Apple iOS 11+, iPadOS, Android 10+, Samsung One UI, and Windows 11. When a WPA3-capable smartphone scansT:WPA;, it negotiates WPA3-SAE during the 802.11 Association phase if the router supports it! - Strict WPA3-SAE (T:SAE;): Supported natively by Android 11+ and iOS 14+. However, older smart TVs, budget Android handsets, and legacy handheld consoles will report an "Unable to join network" error if
T:SAE;is enforced. In residential and cafe environments,T:WPA;provides the optimal balance of modern security and backward compatibility. Check spectrum congestion with our Wi-Fi Channel Spectrum & Overlap Visualizer.
Section 4: Hidden SSIDs & The H:true Parameter Mechanics
In standard Wi-Fi operation, access points broadcast Beacon Frames every 102.4 milliseconds containing their SSID in cleartext. When an administrator enables "Hide SSID", the router replaces the SSID string in beacon frames with null bytes (0x00).
If a guest points their smartphone camera at a standard QR code without the H:true; parameter, the smartphone listens for matching beacon frames. Because no beacon matches the target SSID, the camera will time out and report "Network not found".
By enabling our Hidden SSID toggle, the payload encodes H:true;. This instructs the smartphone's Wi-Fi driver to actively transmit Probe Request frames containing the specific SSID, prompting the hidden router to reply with a Probe Response and establishing an instant connection.
Section 5: QR Error Correction Mathematics (Reed-Solomon Codes)
QR codes incorporate Reed-Solomon Error Correction Code (ECC) polynomials over Galois Fields $GF(2^8)$, allowing complete data recovery even if the code is torn, smudged, or partially occluded:
- Level L (Low - 7% Recovery): Yields the lowest bit density and largest individual module blocks. Ideal for tiny screens or low-resolution smartwatches.
- Level M (Medium - 15% Recovery): The universal default sweet spot. Balances high data density with resilient error recovery for residential desktop monitors and mobile screens.
- Level Q (Quartile - 25% Recovery): Recovers up to a quarter of obscured data modules. Recommended for laminated restaurant table tents and cafe signs prone to spills.
- Level H (High - 30% Recovery): The maximum error tolerance standardized in ISO/IEC 18004. Crucial if you plan to print your QR code on textured paper, wood, or place a physical logo in the center of the matrix.
Section 6: Comprehensive Wi-Fi QR Code Reference Tables
Review the essential technical specifications, camera compatibility matrices, and security comparisons:
Table 1: Mobile Operating System Native Camera QR Compatibility Matrix
| Operating System / Platform | Native Camera Scanning | Minimum OS Version Required | WPA3-SAE Support | Hidden SSID (H:true) Support | User Experience & Workflow |
|---|---|---|---|---|---|
| Apple iOS (iPhone) | Native Camera App | iOS 11.0 or later | Native (iOS 14+) | Yes (Prompts Join Dialog) | Camera recognizes Wi-Fi banner; single tap connects instantly. |
| Apple iPadOS (iPad) | Native Camera App | iPadOS 13.0 or later | Native | Yes | Instant top notification banner: "Join Wi-Fi Network". |
| Google Android (Pixel/Stock) | Native Camera & Quick Settings | Android 10.0 or later | Native (Android 11+) | Yes | Google Lens / Camera pop-up card with direct "Connect" button. |
| Samsung Galaxy (One UI) | Camera App & Quick Panel | Android 9 (One UI 1.0+) | Native (One UI 2.5+) | Yes | Native notification banner; supports Wi-Fi network direct sharing. |
| Microsoft Windows 11 | Camera App / Barcode Mode | Windows 11 Build 22000+ | Native | Yes | Camera app reads Wi-Fi QR and invokes Settings → Network → Connect. |
| macOS (MacBook / iMac) | Third-Party App / Photo Scan | macOS 13+ (Live Text) | Native | Manual fallback | Live Text detects Wi-Fi QR in Photos or Safari. |
Table 2: QR Error Correction Levels, Data Densities & Damage Recovery
| ECC Level | Reed-Solomon Recovery Rate | Module Density Impact | Optimal Physical Use Case | Vulnerability to Smudging / Occlusion |
|---|---|---|---|---|
| Level L (Low) | Up to 7% of damaged codewords | Lowest (Fewest modules / largest dots) | Electronic displays, smartwatches, tiny digital cards | High (Minor smudges cause decode failure) |
| Level M (Medium) | Up to 15% of damaged codewords | Standard (Balanced module footprint) | Desktop web pages, general residential printing | Moderate (Handles standard desktop printing cleanly) |
| Level Q (Quartile) | Up to 25% of damaged codewords | High (Denser module grid) | Cafe table tents, retail store displays, outdoor signage | Low (Withstands heavy scratches and partial shadows) |
| Level H (High) | Up to 30% of damaged codewords | Maximum (Densest module grid) | Menu cards, wooden stands, center logo embedding | Negligible (Recovers even if nearly 1/3rd of code is missing) |
Table 3: Router Portal Offline QR vs. Commercial Cloud QR Generators
| Evaluation Parameter | Router Portal Client-Side Engine | Commercial Cloud QR Generators (qr-code-generator, me-qr) | Security & Operational Consequence |
|---|---|---|---|
| Wi-Fi Passphrase Privacy | 100% Offline (Zero Network Transmission) | Transmitted to cloud server database | Cloud services can harvest private Wi-Fi credentials. |
| QR Payload Encoding | Direct MECARD URI (WIFI:T:WPA;S:...) | Tracking Redirect URL (https://track.vendor.com/...) | Direct encoding connects immediately with zero network delay. |
| Expiration & Paywalls | Permanent • Never Expires • 100% Free | Expires after 14-day trial • $9.99/mo fee | Printed cards on cloud services stop working without subscription. |
| Advertising & Popups | Zero Ads • Zero Tracking Pixels | Aggressive popups, interstitial ads, upsells | Clean, distraction-free printing and downloading. |
| Export Formats | High-Res PNG (1024px), Scalable SVG, Print Card | Watermarked PNG only (SVG locked behind paid tier) | Full vector SVG and print CSS included completely free. |
Frequently asked questions
Does Router Portal or any third-party server see my Wi-Fi password when I generate a QR code?
No. Absolutely zero network requests are made when generating your Wi-Fi QR code. The entire encoding process—from parsing your SSID and passphrase into the MECARD standard to calculating Reed-Solomon error correction polynomials and rendering the visual canvas/SVG matrix—executes 100% locally inside your web browser's JavaScript runtime. You can even disconnect your internet connection entirely after loading this page, and the generator will continue functioning flawlessly.
Why does my phone camera fail to scan or connect to a hidden Wi-Fi network?
If your router is configured with a hidden SSID (meaning it does not broadcast its network name in public beacon frames), a standard Wi-Fi QR code will fail because your smartphone only listens passively for matching beacons. To connect to a hidden network via QR code: check the "Hidden SSID" box in our generator before downloading or printing. This encodes the H:true; flag into the payload, which instructs your smartphone's Wi-Fi chip to transmit active probe requests directly seeking your router.
Can I print this Wi-Fi guest card on paper for my home, Airbnb, or coffee shop?
Yes! We provide three pre-styled designer printable guest card templates (Modern Minimalist, Cafe & Hospitality Tent, and Dark Tech Lounge). Simply enter your network details, customize your welcome note, and click the "Print Wi-Fi Guest Card" button. Our dedicated print CSS automatically suppresses website navigation, headers, footers, and sidebars, centering only the stylish Wi-Fi card on your paper.
What is the difference between downloading PNG and downloading SVG?
PNG (Portable Network Graphics) is a raster image format rendered at a crisp, high resolution of 1024x1024 pixels, ideal for digital sharing, smartphone photo galleries, and standard photo paper printing. SVG (Scalable Vector Graphics) is a mathematical vector format made of XML paths that can be scaled to any dimension (from business cards to massive outdoor billboard banners) with absolute zero pixelation or blurriness, making it the preferred format for graphic designers and commercial print shops.
Why do some commercial Wi-Fi QR codes stop working after a few weeks?
Many commercial QR generator websites generate "Dynamic QR Codes" rather than direct Wi-Fi codes. A dynamic QR code contains an external tracking web address owned by the vendor that redirects visitors to your credentials. These commercial sites deliberately expire free codes after a 14 or 30-day trial period, forcing users to pay expensive recurring monthly subscriptions to keep the codes active. Router Portal generates 100% direct, static MECARD payloads that belong to you forever and will never expire.
Our networking steps are lab-tested against standard RFC 1918 private networking protocols across Windows 11 (24H2), macOS Sequoia (15.1), iOS 18, and Android 15. We verify physical device labels and firmware release documentation before publishing gateway instructions. Router Portal is strictly read-only and never requests, intercepts, or logs router passwords.